Static task
static1
Behavioral task
behavioral1
Sample
6739ba960c7c2d79bc04d36a1d273814_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6739ba960c7c2d79bc04d36a1d273814_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6739ba960c7c2d79bc04d36a1d273814_JaffaCakes118
-
Size
82KB
-
MD5
6739ba960c7c2d79bc04d36a1d273814
-
SHA1
be0699701ea35c22d5e132b4f072ff4ff28ed19f
-
SHA256
42c6e339d2e2be7b033f92ed9925ab2715e2c20abf53540406e7bca5c07f2ac7
-
SHA512
25e887b92dcaeada2c7a31e3e7a87b0318b52bfc13047bc04b3d7f1afe74fad0add7e3032dc8cca73c35762aa74afd6968ff09739dc909fbfb34090d37b26b43
-
SSDEEP
1536:rkWU65Sn8VUxxHzSnc9eBwL6b9yAmZF9nPaYPnZWR+Y7CCx8A3zL:AWcn/aSeBaJAmFnPXPnZdYxx8A3zL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6739ba960c7c2d79bc04d36a1d273814_JaffaCakes118
Files
-
6739ba960c7c2d79bc04d36a1d273814_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE