Static task
static1
Behavioral task
behavioral1
Sample
6653caf10543fe4e98a0d0a14849809f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6653caf10543fe4e98a0d0a14849809f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6653caf10543fe4e98a0d0a14849809f_JaffaCakes118
-
Size
371KB
-
MD5
6653caf10543fe4e98a0d0a14849809f
-
SHA1
d69d3c21088d712aab1a35735561ee60580735d0
-
SHA256
74afd87bcfb91e8aaded47f7d518d080a655e072ed3c409f9868ce4fd9dfef71
-
SHA512
13a434220dfe54485a62df214905ba7a6ada8f7c33949270f6f52f69e68dc8378a500b3bcb8d876d2bc8163f09ea480b29e4e7afacab32d7efe8d8ef9fa39dff
-
SSDEEP
6144:3XWGHtAh5msd+F2idZecnl20lHRxp3gQncduD7yB9VCO6Sco4q8+dE6Cqlg3Q4hB:3G6t+HoF3Z4mxxzDqVTVOCW3QqB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6653caf10543fe4e98a0d0a14849809f_JaffaCakes118
Files
-
6653caf10543fe4e98a0d0a14849809f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE