Static task
static1
Behavioral task
behavioral1
Sample
6297b920e61fe52655ce0fb410cefdf5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6297b920e61fe52655ce0fb410cefdf5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6297b920e61fe52655ce0fb410cefdf5_JaffaCakes118
-
Size
17KB
-
MD5
6297b920e61fe52655ce0fb410cefdf5
-
SHA1
9a5c492be9fb550df8bc3081ccb5a77d879c8be4
-
SHA256
8119de2225134b282f3d080ad0c5853e4e1436f616eb18c24571bcb3cc249533
-
SHA512
ec86d4985ce1a808013d74c7bf85de2085d93bb2a615163197b38a0f1211cd82a0de9eeb2f1a3412a456ac0e6aa425498dec5383ed748a52d1ffb33bcc7ea965
-
SSDEEP
192:fdJdDV4Paqnz9tND2wFFFWOO4Tuu9kqB6EGqgNtGnyWOE+LArUp0orEFaNJhLkwA:VGx5V/jX91ny3OSMaNJawcudoD7U4xz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6297b920e61fe52655ce0fb410cefdf5_JaffaCakes118
Files
-
6297b920e61fe52655ce0fb410cefdf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE