Static task
static1
Behavioral task
behavioral1
Sample
6825c8453928a7ec23a331b7a74cd950_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6825c8453928a7ec23a331b7a74cd950_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6825c8453928a7ec23a331b7a74cd950_JaffaCakes118
-
Size
194KB
-
MD5
6825c8453928a7ec23a331b7a74cd950
-
SHA1
0d554c46fcc356ecd6f9842a2a73814ac269617d
-
SHA256
44f9499b99b90a59217bc339806b6722aef10ee2f3816a792ccea8276b73eb02
-
SHA512
e5deb05c8f55c54d7bbd6edf935d3df8ff6c8865ca93ae11c640d08ab19f6a524a2d730947de72d53a672e920ac1b7cda0bc6e1673f4a48a9d1fa8be70dc34bd
-
SSDEEP
6144:u6SyRGg5KaU1s6hziop+v2+D/vwJd8qF5tmlhABG:K+++xqSG8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6825c8453928a7ec23a331b7a74cd950_JaffaCakes118
Files
-
6825c8453928a7ec23a331b7a74cd950_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 844B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ