Static task
static1
Behavioral task
behavioral1
Sample
6100e2968bf9a48aeb8a95e860d06e4e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6100e2968bf9a48aeb8a95e860d06e4e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6100e2968bf9a48aeb8a95e860d06e4e_JaffaCakes118
-
Size
560KB
-
MD5
6100e2968bf9a48aeb8a95e860d06e4e
-
SHA1
4c415b649f8e1f2b50d9b359ec789f51d1e2087a
-
SHA256
c42f10e3651f01b513928436ffa8772b85d4353e86fe89637aa316e2b2c14fd3
-
SHA512
887f21eba09df9957c90175f8eea47243532e333d2a8670b2c188be39cd233b0903fe97e35709001b7e4cb46715020855e0becb8fe583ce5b6930f8864fdb79d
-
SSDEEP
12288:VGnxtV/9db/LwZ2Xd8Wmavgw4mNn/UJu7wBDUwD0W1K3Dnspw1XVPj7n:qZ/7b/cq5FjNn/UJu7wBD70W4Dsi19jz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6100e2968bf9a48aeb8a95e860d06e4e_JaffaCakes118
Files
-
6100e2968bf9a48aeb8a95e860d06e4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 230KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 277KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE