Static task
static1
Behavioral task
behavioral1
Sample
1c6c65ef608313fc3c1f449f97629671_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c6c65ef608313fc3c1f449f97629671_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c6c65ef608313fc3c1f449f97629671_JaffaCakes118
-
Size
37KB
-
MD5
1c6c65ef608313fc3c1f449f97629671
-
SHA1
3dae9ed84ba507cdd5c12b79d65b9afee7587a32
-
SHA256
7031e0466835648f3e07fd19018ae2f00aedfd1ee4ba195226af87e34e1d524b
-
SHA512
9203ec63be41f1520cbbe5bb0a04f02c532810efb5c040cedd3a9454d7f38d3327526cefdf10cccf464e72a56de501a62bf5adb5c945841163290bcd1286ea8f
-
SSDEEP
768:oZC0QQg1Jj1ps8xuF065doKP9dL/5sWgEb9JfI1N6pr9f2EpC8ydIOSZfFZZ:o8/P/j1ps8AoKP9R5sWlbQD6989IZfz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6c65ef608313fc3c1f449f97629671_JaffaCakes118
Files
-
1c6c65ef608313fc3c1f449f97629671_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 37KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE