Static task
static1
Behavioral task
behavioral1
Sample
6829e6599dd8d5ba71dc62c85a5d161b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6829e6599dd8d5ba71dc62c85a5d161b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6829e6599dd8d5ba71dc62c85a5d161b_JaffaCakes118
-
Size
363KB
-
MD5
6829e6599dd8d5ba71dc62c85a5d161b
-
SHA1
d886f44f2693442ae3cffd798c0a1de79c5f76d3
-
SHA256
e703bbc297989c63493d14b4734368cd30a34b3fc3dcd52d18e2db181743b429
-
SHA512
e1e11d8c7ea10777fb2e48c1e3903a923a20f62207f02bfabe804f9e9912f6756ece4e652ed55a1c550392751e58ac877226a08f630da424527e5d06ebdb62da
-
SSDEEP
6144:NnHEJwGfynjIOmgbgGg9Yyv9VDc63bwxHyybM0drOA3iL2LUtba9r:NnHv86IOmkgP9Yi9hnrwxTI0drOA/LM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6829e6599dd8d5ba71dc62c85a5d161b_JaffaCakes118
Files
-
6829e6599dd8d5ba71dc62c85a5d161b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE