Static task
static1
Behavioral task
behavioral1
Sample
6006c8a541d930d66633e3fd15b7b9f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6006c8a541d930d66633e3fd15b7b9f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6006c8a541d930d66633e3fd15b7b9f6_JaffaCakes118
-
Size
825KB
-
MD5
6006c8a541d930d66633e3fd15b7b9f6
-
SHA1
c3f46a608c168d4cb6fd405d3f9e4d50f23697f7
-
SHA256
704137ca79b04147ba57531edf4fa8cda2dfd545ad8c7d35da6fce60a935ed9e
-
SHA512
1faed9b56af4e3752e3e397bac0e9b72fae98baf50919960a3a1108f32851dc7e3be84af709c8de9b5373df411224f33784e961bc9460ee0ee95a066d6a1883b
-
SSDEEP
12288:YXrHTWz5AkGaOTTAPWwC3kAH4cdzG7Qd0ynYaJflJy2jhFR5Nl3s2r3eIYQ5yw:6jCV0TbL37YKSaJf221F/82r3eJQn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6006c8a541d930d66633e3fd15b7b9f6_JaffaCakes118
Files
-
6006c8a541d930d66633e3fd15b7b9f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c6123d303ca80e09ae8a08dbb30a95d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
Sections
qhtthayu Size: 29KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqxhezym Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpncsmcd Size: 665KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgcnnnta Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE