Static task
static1
Behavioral task
behavioral1
Sample
b6540c034218ca53cb624fc1aa3f32e9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b6540c034218ca53cb624fc1aa3f32e9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b6540c034218ca53cb624fc1aa3f32e9_JaffaCakes118
-
Size
89KB
-
MD5
b6540c034218ca53cb624fc1aa3f32e9
-
SHA1
c94f1bd407b480316322294dea8e55449918ea95
-
SHA256
467c8ee160d7982fe93a62010ec49974fb7195db16904f331fbe4a5ae8171ed8
-
SHA512
62f1ef223502a16ddfcc525bf2901314ec1a9bcc9988436cead9b817210f5ee70fb01e5171bf63244fe2f3836ceb2af966b5957807a0030cb9b7741272455a5c
-
SSDEEP
1536:InPEJEPT7jBesjxt5LnIb7S4iICwl6GR7aMTTRWJuWMqCxxWCM:InPEC5jbt3Sl6g+MTVWJuWLCx0CM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6540c034218ca53cb624fc1aa3f32e9_JaffaCakes118
Files
-
b6540c034218ca53cb624fc1aa3f32e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.data Size: 900KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ