Static task
static1
Behavioral task
behavioral1
Sample
6145c839eb0174444645436bf6f0988f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6145c839eb0174444645436bf6f0988f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6145c839eb0174444645436bf6f0988f_JaffaCakes118
-
Size
125KB
-
MD5
6145c839eb0174444645436bf6f0988f
-
SHA1
fe72ef327f697afc02e6e97e94a6993c663d1e35
-
SHA256
a4bb37d1187722677777e6143a761e3313f9f63f176e0c98eaed6b75e1c0ca22
-
SHA512
31c14a3f13367e3c59a26a5a6eb4ce7f77eca4d1c100cedf2ea54095d93f0f393c87976b87f3272a011e6b2299ebf280c93c6bfcdfef634ed19a8a946d68e607
-
SSDEEP
3072:/tuvIZd3jv/AVwqggaxUjGNQvbeAinW0PaxUa08xnJj3UauTotrlckbZRuzYxbL4:ovIZd3jgpggaxUKNtAinW0PE908xJj3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6145c839eb0174444645436bf6f0988f_JaffaCakes118
Files
-
6145c839eb0174444645436bf6f0988f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 469B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ