Static task
static1
Behavioral task
behavioral1
Sample
6178539b487c781f258e2d723ac87275_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6178539b487c781f258e2d723ac87275_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6178539b487c781f258e2d723ac87275_JaffaCakes118
-
Size
43KB
-
MD5
6178539b487c781f258e2d723ac87275
-
SHA1
ad90d9e11d0b389ccdef13903c6d5f4c0a00d67d
-
SHA256
1cd03914a5b004a7a5a79c72b156d437dd08f0b62d1bbd37464c7098fff21d08
-
SHA512
b9d02aa60a849e22597183370bea3f899d0673616821ece2c3ec3c2df141b3758b76caf1d63ecbd53da87853ecf7aa4ec0b8cfb9151e2ede1753e1181479d142
-
SSDEEP
768:c5VGSfR0OmL8aio5FJ+9fnFO6/4FYsSdxQ5qr5t5JrtnPbtPe/3Fl+m67:aVG4WTxU9vlQFlr5Y5t5RtDd0lE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6178539b487c781f258e2d723ac87275_JaffaCakes118
Files
-
6178539b487c781f258e2d723ac87275_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_winzip_ Size: 51.4MB - Virtual size: 51.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ