Static task
static1
Behavioral task
behavioral1
Sample
6856de7019020965b32429c0e95990fa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6856de7019020965b32429c0e95990fa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6856de7019020965b32429c0e95990fa_JaffaCakes118
-
Size
568KB
-
MD5
6856de7019020965b32429c0e95990fa
-
SHA1
405f00191fe8e63e7d1f538e5ac5efc0545923bd
-
SHA256
ae3ed48682ce30ed44786f01369b347667ec684a6da16f924a3c43f1831ee134
-
SHA512
8216549c396fb961bdeec6f4ee84504f4928a3acbc23f76dd3aee14fded1654be0a8793b7e10b579a7285c6a63c5b7fb7db1ca4fe165acd79e998e7aa383a750
-
SSDEEP
12288:8crgmAexG4OVlo5Mqg0BCaCP3zzoJQAffnpr2NxgJJd5n5yrs:mmn848o5MjHaCPjzoJQAffp6/gJGrs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6856de7019020965b32429c0e95990fa_JaffaCakes118
Files
-
6856de7019020965b32429c0e95990fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 552KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ