Static task
static1
Behavioral task
behavioral1
Sample
6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118
-
Size
272KB
-
MD5
6989b7091eb3300d1ae4099b9f8e515f
-
SHA1
98a2529f8d2f6f8c86f2bb266d62d268460550d4
-
SHA256
fa6ef9cca2b51022eaae9fe589fe7a0f95f82ccead5d27ff6eb96a47a8df6815
-
SHA512
1a68bed87b39a36290653aed74ffb6b1a0bd30d01ae53cd29b79f77be32fda9ed9c41a90c67b0b745524e88b3ef103f7dbd3212a7c527745e1811709ed946673
-
SSDEEP
6144:pbAwnyp8ZfWuSyss+k3PDOA7U5Tl1L96YG:p7nypVuSyR+kaA7+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118
Files
-
6989b7091eb3300d1ae4099b9f8e515f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
�x$q?�� Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
V�p'�� Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�R��n�� Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�O~�� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Ι�Zr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ