Static task
static1
Behavioral task
behavioral1
Sample
6dd3251d501c0d6625f941459580b504_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6dd3251d501c0d6625f941459580b504_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6dd3251d501c0d6625f941459580b504_JaffaCakes118
-
Size
1.1MB
-
MD5
6dd3251d501c0d6625f941459580b504
-
SHA1
71414f7b1812c14e0c98102a3f3dc387eb817e81
-
SHA256
ade9609a1b67a088d9180d4e488746d820344a640b58a39e89fc54b8b7e6028c
-
SHA512
042abb916f606037dc16caf37c89d4db12e017c665e29ad854aaf7af5390c7d5059d40eb16ef3cb62b6026a2bf247f9cabeca2e6ad19e578faf55a28a19d2e58
-
SSDEEP
24576:UuhaANerQZb+md4wmXeZJ8NI8U7erQZb+md4wmM:bhNerQZbd288U7erQZbd24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dd3251d501c0d6625f941459580b504_JaffaCakes118
Files
-
6dd3251d501c0d6625f941459580b504_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ