Static task
static1
Behavioral task
behavioral1
Sample
6973da394e3ba8c0893c531ec82da318_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6973da394e3ba8c0893c531ec82da318_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6973da394e3ba8c0893c531ec82da318_JaffaCakes118
-
Size
33KB
-
MD5
6973da394e3ba8c0893c531ec82da318
-
SHA1
eb9ab51abc8f98d6e2d35717f4fa34de2b8cc860
-
SHA256
082ab63d6df662c2fb24ad08a67e7ff40863896d799bdd29d2e051f35b6c70ec
-
SHA512
f2dd4caade61d952a843a90a0b5c0603c2e0ec04498add955b7dead2216675680a1eb3f365fb5bc429f8b1e1ebad0137fcd5cb714993eee2a3b760435fc30007
-
SSDEEP
192:ZRY0+5IIkA5VCClflN8Td9aKQ3RqPD8uiiYReeua+yDYG1JEKy+:zY0IksVtlflNm0K2ReDT3YR66YGPE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6973da394e3ba8c0893c531ec82da318_JaffaCakes118
Files
-
6973da394e3ba8c0893c531ec82da318_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Ghirai Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fearless Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE