Static task
static1
Behavioral task
behavioral1
Sample
6df127b1c8be8e04a234acaa58652a6d_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
6df127b1c8be8e04a234acaa58652a6d_JaffaCakes118
-
Size
1.3MB
-
MD5
6df127b1c8be8e04a234acaa58652a6d
-
SHA1
b67bc4ebabb42ec862b03545c80675ad47fbb0e2
-
SHA256
5e9792038f503c1d7b575a9b9da2abe1c52d3e23c2320ce8a480a5e4e8538288
-
SHA512
85c9a29da9dc164aedfcff10a6f115ce110e8d4ad5fe19d94d3a5ea376cea58661a68686daa3733e47f701b03a66f5f3ce5c890a9140e5fcfe2c11e8ed1a1792
-
SSDEEP
12288:Ch/pCHxW4pbAOeeeZeeeeEhMEr6CX4zistl:U/eDNAuaE6tis
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6df127b1c8be8e04a234acaa58652a6d_JaffaCakes118
Files
-
6df127b1c8be8e04a234acaa58652a6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ