Static task
static1
Behavioral task
behavioral1
Sample
6236cc459a3bd467680a05e17eb6328f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6236cc459a3bd467680a05e17eb6328f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6236cc459a3bd467680a05e17eb6328f_JaffaCakes118
-
Size
253KB
-
MD5
6236cc459a3bd467680a05e17eb6328f
-
SHA1
adf6efaabe96a4545567a7b223e45c3ac7573663
-
SHA256
811524beb6842a3ab51c1d877e6b6e645eb1ec6dfbc6e49d5066ec07b894b189
-
SHA512
8c1c402cc49e4c763cb828cff091ee454463a194ae7fb01a0ef7bffcdf32c6a9cc8496f3ed58a0cbf2c1ea4b0e9c015b142f68d223507870258e254cb94f6d66
-
SSDEEP
6144:CepDHF6Bxem9ZOAZZwLn1W5GJZ2tNYLj8Mfs2tKF9nZ4:h56xBAku1zYKj86s2tKF9nZ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6236cc459a3bd467680a05e17eb6328f_JaffaCakes118
Files
-
6236cc459a3bd467680a05e17eb6328f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 76KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 172KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE