Static task
static1
Behavioral task
behavioral1
Sample
6460e303a3048ac6a82069aac9bbb115_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6460e303a3048ac6a82069aac9bbb115_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6460e303a3048ac6a82069aac9bbb115_JaffaCakes118
-
Size
124KB
-
MD5
6460e303a3048ac6a82069aac9bbb115
-
SHA1
2a91a19b957d0bc868a48217ecd4bc6dc94f8276
-
SHA256
6a5a6c07db8ac5b9205134e89f8a4319ff44b5506a34d080480de16ee36c06a9
-
SHA512
5b982954ce41404c65f875d2e31da979b2320e51bf0593da24308a87d098ab4d706264eb41a41cdf5b9091673c2db415ef3ce76182ea208b4dce2846cafbbbcf
-
SSDEEP
3072:S9ttzQ/YHy3iPAlzxGOBqyKsUS7m3H9onRTLYbo:LYHy3i45NKsho9oNYbo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6460e303a3048ac6a82069aac9bbb115_JaffaCakes118
Files
-
6460e303a3048ac6a82069aac9bbb115_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
smojdcvz Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdgla2xb Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2v9s75z Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE