Static task
static1
Behavioral task
behavioral1
Sample
5c6f1f82a30c316a9247dc43e4a29757_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c6f1f82a30c316a9247dc43e4a29757_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c6f1f82a30c316a9247dc43e4a29757_JaffaCakes118
-
Size
120KB
-
MD5
5c6f1f82a30c316a9247dc43e4a29757
-
SHA1
0914e4721b4d825bf0f2f51d710a563f60361035
-
SHA256
b642523e5c9a855037b1c935e83b0b03d35e94dd1a8946628b6053d466ea8e8f
-
SHA512
947af4aa1bb01b3a9586e9428853cba3fc4e073b7f6ce93128e64e30c1a86e9d359efb253f1d5698edba0e977207fabdb464f15e700c323a070ad0d5163bbdc3
-
SSDEEP
1536:1Kl2axNCpCXE9ChPaSwjHqhYruMVINW3xtxDGPsabVlyaBB:1F9C7wjAcOO9a5ljBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c6f1f82a30c316a9247dc43e4a29757_JaffaCakes118
Files
-
5c6f1f82a30c316a9247dc43e4a29757_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE