Static task
static1
Behavioral task
behavioral1
Sample
6127400869f23d677d625932913eabf1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6127400869f23d677d625932913eabf1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6127400869f23d677d625932913eabf1_JaffaCakes118
-
Size
63KB
-
MD5
6127400869f23d677d625932913eabf1
-
SHA1
c9c4fb881ba2c2cae64d77ed2f416119209e39a9
-
SHA256
1b132fd8cb7544d3ddad51e5efeba71d4d07d90ba50b4222fa18b9f175c4517f
-
SHA512
a9303616c560d02f2f915795f3f5b781b13fff8b20eee816666d67f704a0833806abd62a9b552fe7f0194eeffa40f6e487d6ada4920799b7f9b2e5a88d1dc172
-
SSDEEP
1536:sPUV1b12s89QAyI02+m/HaRLKrdSga0gFDbShw:sPU3K2AN+moLSta0ghbShw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6127400869f23d677d625932913eabf1_JaffaCakes118
Files
-
6127400869f23d677d625932913eabf1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.aaaa Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cccc Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xxxx Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE