Static task
static1
Behavioral task
behavioral1
Sample
6435b04114369e57fe17f1b6833f3069_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6435b04114369e57fe17f1b6833f3069_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6435b04114369e57fe17f1b6833f3069_JaffaCakes118
-
Size
249KB
-
MD5
6435b04114369e57fe17f1b6833f3069
-
SHA1
7089c7ec8988eebce50dd808888ead8e37b49662
-
SHA256
6a26eba1d04f2fefa1b3b41b031c6ab4558985f284eae63d3b278353baa32cab
-
SHA512
2df74af35ca8fb8d308370bd3f06c258b2ba33988120edb32823603f9605638ebf66d2f910240e5cf60e260ad411f4f9619f9909e5ba4e6c8acade10dda6fa1f
-
SSDEEP
6144:40BxlD0KM0SOPwVFMkw/iFOy2BcisYYidykSyF:tHlD9S6caiFO9cimkS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6435b04114369e57fe17f1b6833f3069_JaffaCakes118
Files
-
6435b04114369e57fe17f1b6833f3069_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.scpack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ