Static task
static1
Behavioral task
behavioral1
Sample
6a55fd4ad94945afa83646958840242b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
6a55fd4ad94945afa83646958840242b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6a55fd4ad94945afa83646958840242b_JaffaCakes118
-
Size
1.5MB
-
MD5
6a55fd4ad94945afa83646958840242b
-
SHA1
e27d6ae270171f15252da05b5f28a3d57d41e373
-
SHA256
cd7d073848c9e998cf3e5bd0efddd7f09c4907c9986dc9352e49f47d3064e70a
-
SHA512
d987036fe27821ba22451243584b0b2c6fcbbc94d1e35c4eca8756086cc928cc674050ca295ed55d8e4fef991464d3034d4456993263573f2350e7a1cae452a1
-
SSDEEP
24576:WvdYAcUR0mSQOZJcDshAIQmQIIxVB9iLNUHUpHHPDrlkyKG:m1cHOOc6AYYxh4WaPDrlz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a55fd4ad94945afa83646958840242b_JaffaCakes118
Files
-
6a55fd4ad94945afa83646958840242b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1008KB - Virtual size: 1007KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ