Static task
static1
Behavioral task
behavioral1
Sample
6916a87aa80cf6a4c4c22cceacc92c87_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6916a87aa80cf6a4c4c22cceacc92c87_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6916a87aa80cf6a4c4c22cceacc92c87_JaffaCakes118
-
Size
128KB
-
MD5
6916a87aa80cf6a4c4c22cceacc92c87
-
SHA1
110053a67fb17095c7c7aa71f322fd98b8fbc0be
-
SHA256
19a2f0bc4d8f8a6754f0f3c31ac7d7a3cc4a302e50e117962876c62789eacbd4
-
SHA512
9c53e7eb9963a915eb97146927cec063a4eabe737eba56bef2265f4ef7b9c7c5318fb94f12f705f7781822496b15c894321a2bb298812146e1f94ba146fb580a
-
SSDEEP
3072:R02VRBdL1v83+j0D18ZI8LsjfKr9LbxLXCq0e:qIshAI8LsOrTLyq0e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6916a87aa80cf6a4c4c22cceacc92c87_JaffaCakes118
Files
-
6916a87aa80cf6a4c4c22cceacc92c87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ