Static task
static1
Behavioral task
behavioral1
Sample
6c30124bc15295e5835116407965f553_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6c30124bc15295e5835116407965f553_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6c30124bc15295e5835116407965f553_JaffaCakes118
-
Size
830KB
-
MD5
6c30124bc15295e5835116407965f553
-
SHA1
6fafc2485ea1ed6ad4c39a7ac32b4ced16722193
-
SHA256
bc9a9b804c7bca511188a91beeba892a9ad48af8fe1e487f099be39b200930a7
-
SHA512
4e3ea86a5ee4c84625601dd4479953b94d904ee0fb9bf700522cd8e9518ed3f23b32a55179a28deb92c0a0d827cab3930216d93ae39ce78eb902a1af455396b5
-
SSDEEP
6144:UZfec9EbXDk6Rk8KFSE2EZ/UOPSe570Szp3sGFrQZb++tdsHP4+QfI6UsrG1VVE5:UZWtI6Rk7ZyOB03erQZb+md4w1U4uhW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c30124bc15295e5835116407965f553_JaffaCakes118
Files
-
6c30124bc15295e5835116407965f553_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ