Static task
static1
Behavioral task
behavioral1
Sample
6834380d928f3eaebf9d5f2b918cfac6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6834380d928f3eaebf9d5f2b918cfac6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6834380d928f3eaebf9d5f2b918cfac6_JaffaCakes118
-
Size
489KB
-
MD5
6834380d928f3eaebf9d5f2b918cfac6
-
SHA1
60d25848d2c3262ad8aabb191f40d6910647e430
-
SHA256
ea3d70b0b6d2feeb5200d8c46c237708830c4b66e81ea79f65400f0de1fa2b36
-
SHA512
44922a98f4882ad22024413f545c0da873b14d7240485e3d623f29df476083c22038e47f3765ddc947c313b7807aa187cbee750c30bd71186e6bebab5bebd48c
-
SSDEEP
12288:FgrwmYYf/cc2zNE1c2obY7qE5yQda3+eZL0rN3wkl:FgriYfVbocj5tNeurFwkl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6834380d928f3eaebf9d5f2b918cfac6_JaffaCakes118
Files
-
6834380d928f3eaebf9d5f2b918cfac6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE