Static task
static1
Behavioral task
behavioral1
Sample
6533896cd5e20ee066f068fc8a85f7c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6533896cd5e20ee066f068fc8a85f7c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6533896cd5e20ee066f068fc8a85f7c7_JaffaCakes118
-
Size
103KB
-
MD5
6533896cd5e20ee066f068fc8a85f7c7
-
SHA1
3ff87e9ace3de5e96e09b3c01e5321651da56fe5
-
SHA256
ec7e05159ea2204d3e9f6e6dd29399bd5942b9d57b0d4b3c1b4678bc44254198
-
SHA512
4a02ef768c29e73814804eaf132a0f1be72bb36c3b403f467f161f8edd4ba6d0858deb0816fcce7cf224e7df62f6eba989c736b54e3242c7cccaacf1c7391810
-
SSDEEP
1536:qkJeGavvDoRe+0klzQ0n45uE8Zm6UE3dL9LWAkxEglkDENFxHdnzvTyu5hLn:qkJMue+vzQ0Vtc6UwLxkxE8eEJpzvrLn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6533896cd5e20ee066f068fc8a85f7c7_JaffaCakes118
Files
-
6533896cd5e20ee066f068fc8a85f7c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE