Static task
static1
Behavioral task
behavioral1
Sample
6767486238b41a5b4d5c8ee9698b83e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6767486238b41a5b4d5c8ee9698b83e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6767486238b41a5b4d5c8ee9698b83e6_JaffaCakes118
-
Size
363KB
-
MD5
6767486238b41a5b4d5c8ee9698b83e6
-
SHA1
f3bb88e016a4b12dd407189fb9bde9adf3be9445
-
SHA256
6910d40db996f85b1efc581a2ac88e49661507cfdb91d76519ff322e149caa95
-
SHA512
5012cd2356ba9dd22ba5c028de790708ffd958bf0be4c843431fa9f5d2f0c834797f8be3b37a38d56d8b9c162096f6a6448bd0b110dac718706e2431379cb20b
-
SSDEEP
6144:H60CZLCqMDN57Js3H606lK6v5EyuVd9fOfo8Fu2hj6gVOq4rbgZ:WLgDf7K3H606M6v5E1Vd9AfFjjvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6767486238b41a5b4d5c8ee9698b83e6_JaffaCakes118
Files
-
6767486238b41a5b4d5c8ee9698b83e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 299KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE