Static task
static1
Behavioral task
behavioral1
Sample
6893e62793b47ed98d0f57e76617d6d3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6893e62793b47ed98d0f57e76617d6d3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6893e62793b47ed98d0f57e76617d6d3_JaffaCakes118
-
Size
307KB
-
MD5
6893e62793b47ed98d0f57e76617d6d3
-
SHA1
a7851575154a4fa0c545e67c1ae4b7e542581840
-
SHA256
e0cff9832da382b0bab5941305d70c4e8d30018eb28b274be8f8cfba4b7e5cdd
-
SHA512
6dd8521c2425ce3617c0fc482432da1d068a986850a5c1f8b96fa17bd976d12886a40ee94e41251a226a247f5917275d61ec38d019e4288401cb743914bfaa09
-
SSDEEP
6144:o/ymKXgEUNuH9VuvoH7NKy66emseEIwY+0Sa4AgGy:oVKXgkuvobM6bEIGA9y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6893e62793b47ed98d0f57e76617d6d3_JaffaCakes118
Files
-
6893e62793b47ed98d0f57e76617d6d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.$a6urw Size: 1KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.19vwqb Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n57ywc Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c1rp0j Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k9notc Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jnphkb Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s75gn2 Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: - Virtual size: 3.0MB
.data Size: - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 295KB - Virtual size: 296KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE