Static task
static1
Behavioral task
behavioral1
Sample
6343a0c89f59a066508b09ae666a5371_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6343a0c89f59a066508b09ae666a5371_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6343a0c89f59a066508b09ae666a5371_JaffaCakes118
-
Size
89KB
-
MD5
6343a0c89f59a066508b09ae666a5371
-
SHA1
adfc4f2755e75603d146c13146d57346ce0c5789
-
SHA256
2bc2806ded1b63c1e30619be6d7ed7fe7580ab82b2093115322744a23403cc93
-
SHA512
66bbe9a050b545414106a5ca6612cfcf821142f731460c59ed4a3dcf2f37a66416661c458dd28461b0303a477f37b7bd62ea628ccd281274b584e95ede60eb1c
-
SSDEEP
1536:p2grdrFFB7oJcBCHNy5rzHMhqikuZxK3wEkoOfX2A1CKVAnqXASkg6i+sIMggiSH:Asdr/mKB6Ir7XrDwEjOvkaAS9hI5SIk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6343a0c89f59a066508b09ae666a5371_JaffaCakes118
Files
-
6343a0c89f59a066508b09ae666a5371_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gff Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uyu Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dff Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kjf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.w3e Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ