Static task
static1
Behavioral task
behavioral1
Sample
6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118
-
Size
669KB
-
MD5
6887b8e4d74369989c3bf5f896d1ffb3
-
SHA1
e0a0469ca3485eb8b31d4f91afddecd4edf71755
-
SHA256
90f3da2fbd5181c152f8c55b8b364dd006a674e5d3f954256a29c5bb199073d2
-
SHA512
eedf1f2f6e61dd5bc98d3e3f2ffadd01e94d3510c48b2de46f813cbc86049e04bd365fbb4484563b5f588deba1c03f556225f4b15dd106017ba9da4f0b5b515d
-
SSDEEP
12288:MQj0OuyoKkHNa7yeCsRR9U8RpKPZBW32XJ4Mj+fMgE7ISW5hyXionDP2iN:JUeMvwo2CELC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118
Files
-
6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 655KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ