Static task
static1
Behavioral task
behavioral1
Sample
6201b16d3b11ebf0733d3db28c748aa6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6201b16d3b11ebf0733d3db28c748aa6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6201b16d3b11ebf0733d3db28c748aa6_JaffaCakes118
-
Size
145KB
-
MD5
6201b16d3b11ebf0733d3db28c748aa6
-
SHA1
83d1e9df6c67abb9f0cd3bc0a74f709f66325a60
-
SHA256
82d40e350c5cc7e98d8a07b97a947ef5543229bbb0818b2f0c085edef2b543b8
-
SHA512
6147a6d6129916e99b120e569b9055c994c457f547bab6c8e2ae35e1ce7cdbd15dbf42b4490acbb185a94aa8bad5fe478d2ac5ac0f163824032c82997b5c73b5
-
SSDEEP
3072:VHUWpF2iXhoE6b8iiWmTo8b7l0ah/lAhGXfVgVxOXogauZaZ7:VtDRoE4mT/b7ldhtAhGvRXauUZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6201b16d3b11ebf0733d3db28c748aa6_JaffaCakes118
Files
-
6201b16d3b11ebf0733d3db28c748aa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ