Static task
static1
Behavioral task
behavioral1
Sample
6cce95c5612c9c55b0afafc58a06ef4b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6cce95c5612c9c55b0afafc58a06ef4b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
6cce95c5612c9c55b0afafc58a06ef4b_JaffaCakes118
-
Size
822KB
-
MD5
6cce95c5612c9c55b0afafc58a06ef4b
-
SHA1
0df0c2a3bcfc50760c3a5373bf6a72fc120978e4
-
SHA256
81a4dca0af73baaab288615d0a7e2ca349e03fc21e83a9f08a076b152c8015c7
-
SHA512
97492878d6a397830b3c67da6966f6a09aec0286101dddd640ef658ace5bccbf44d4cc1e6c5bee9a928447613971ef50c2fba7dcb78e0db6bb040ecbbe2e6eb7
-
SSDEEP
6144:UZfec9EbXDk6RkdKI/UOPSe570Szp3irG1VVE+IRuHOI/UOPSe570Szp3irG1VVH:UZWtI6RkWOB0Ju9OnOB0JuGCPZLOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cce95c5612c9c55b0afafc58a06ef4b_JaffaCakes118
Files
-
6cce95c5612c9c55b0afafc58a06ef4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ