Static task
static1
Behavioral task
behavioral1
Sample
6754c54ccddb7b6a213f169525c8006b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6754c54ccddb7b6a213f169525c8006b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6754c54ccddb7b6a213f169525c8006b_JaffaCakes118
-
Size
62KB
-
MD5
6754c54ccddb7b6a213f169525c8006b
-
SHA1
516d68b01c1bfec8b75647f56b6e307b0ebc29d6
-
SHA256
00a7390cdd474eaf62954dd7062248ce0639b2f9a6c65197c1157c7c432d654a
-
SHA512
1f9bf35300f22b39b58d6eebebe34a31a96649741c71f34b1dc0d4cc79dae4fbbc7bcf40f3d942310606d8aea85dfb0f84345527d8562d3da614e50c13e89419
-
SSDEEP
768:wrpeUKbGPJfSs1A1p6m4Z8veIQ25FtKXp2FnbcuyD7U2E:wfqs1AX6m4Z8GIL5FoQFnouy82E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6754c54ccddb7b6a213f169525c8006b_JaffaCakes118
Files
-
6754c54ccddb7b6a213f169525c8006b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE