Static task
static1
Behavioral task
behavioral1
Sample
6d2dd95a5525522087f1ac3ac512dc62_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6d2dd95a5525522087f1ac3ac512dc62_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6d2dd95a5525522087f1ac3ac512dc62_JaffaCakes118
-
Size
68KB
-
MD5
6d2dd95a5525522087f1ac3ac512dc62
-
SHA1
f86a4884e5036e84126c0e3921ea84ffb0390f1a
-
SHA256
4913993cb43d469149cb8b58cb75a119f0892674d1da60f04a02572d47710a7b
-
SHA512
443979155418939007e3cb2d278a2e9b9dc77d22e8879ff5d1f4a9a1831785d714701cf214469f3fa5c348c27fcb35811428ed04f5f480056c6454f13a9b6e2f
-
SSDEEP
768:6xNodVlVQd5M+qapCk6WEyObdEW9BrAa5PUSXqVT/wP4KLd75egrr3:6xMVlVQM+56WEyOJEMR6V/KL+grr3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d2dd95a5525522087f1ac3ac512dc62_JaffaCakes118
Files
-
6d2dd95a5525522087f1ac3ac512dc62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 621B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ