Static task
static1
Behavioral task
behavioral1
Sample
6616b63c78444685b6feefeea910d22c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6616b63c78444685b6feefeea910d22c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6616b63c78444685b6feefeea910d22c_JaffaCakes118
-
Size
76KB
-
MD5
6616b63c78444685b6feefeea910d22c
-
SHA1
2b72611c3cfec77c18262ce3bd8a2e5e1238ef73
-
SHA256
067d1b6fc2fff488f133e6fd3026fc9321db3cbbd72e44b8ecf6e0e5667ec8b7
-
SHA512
4d696ee746f9505d6daf08a7411ec2274bd1a4c42c8e0091defeda0d9c29283551a1c25e4d163dbfb569501c4175a1cc109cade9f161bc8f99e992f89d6a2639
-
SSDEEP
384:zJ2RPpun1Xj7JriHN/lr0FOwscfeVt88hqSD2C8pqElqIck3YLT5eegL2FvVXjh6:zJ6PsC0F3EFqFhUpJT5pgLsx9Gvwvn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6616b63c78444685b6feefeea910d22c_JaffaCakes118
Files
-
6616b63c78444685b6feefeea910d22c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ