Static task
static1
Behavioral task
behavioral1
Sample
a6979dcd8541f0ef89f0ee4e87cc41eb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a6979dcd8541f0ef89f0ee4e87cc41eb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a6979dcd8541f0ef89f0ee4e87cc41eb_JaffaCakes118
-
Size
80KB
-
MD5
a6979dcd8541f0ef89f0ee4e87cc41eb
-
SHA1
44f998ba728b9ce212eb4508d0652b0fec68eb71
-
SHA256
d601cfffb39631f517fc78b025adeb95812501cfdc93b31521149bd14df70e94
-
SHA512
9b569015c1d460553b38cc072f29af2bfb527b17885c8d5bf5b083cb915d2627b3154ed846cd9ee5ab59d6409574447786df037337a8de4b7b76e7b490698161
-
SSDEEP
1536:1hwJXp1nBgxNk62XfMNHa2Ply+N/mKtT8tOJoFNx0:1inTgxNk62XfhgN/9IgOFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6979dcd8541f0ef89f0ee4e87cc41eb_JaffaCakes118
Files
-
a6979dcd8541f0ef89f0ee4e87cc41eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ