Static task
static1
Behavioral task
behavioral1
Sample
6456e41dd2c1dd7a861ce8c6c97d6030_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6456e41dd2c1dd7a861ce8c6c97d6030_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6456e41dd2c1dd7a861ce8c6c97d6030_JaffaCakes118
-
Size
212KB
-
MD5
6456e41dd2c1dd7a861ce8c6c97d6030
-
SHA1
ca2cda77ebc1530e84718019cd95c437f3edf0a2
-
SHA256
5a66f15428b6601d174869632b63aa4e70877ec31ee0dda54310e6704655ab16
-
SHA512
d9bd0860a25b39459613b69bbecdb505282b688a570c53e179b58a82f2534bbe08153dde7f4dcdaaed461abf57b09b37db346627071857d3b2f7feb817376751
-
SSDEEP
3072:AKW2RO4WpR9cttfVNDNLxX9Kb3TO3C0X9NDERMO/GeJgB09TQo9AxRST1:+8XfRLxX9E3Z0XsRMgJ2iQo9ACT1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6456e41dd2c1dd7a861ce8c6c97d6030_JaffaCakes118
Files
-
6456e41dd2c1dd7a861ce8c6c97d6030_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
windows1 Size: 330KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE