Static task
static1
Behavioral task
behavioral1
Sample
6998e8909736fbdbc0d0e34d36ce17fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6998e8909736fbdbc0d0e34d36ce17fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6998e8909736fbdbc0d0e34d36ce17fb_JaffaCakes118
-
Size
305KB
-
MD5
6998e8909736fbdbc0d0e34d36ce17fb
-
SHA1
262471cb3b68a64f96685620b1462f53ac03c088
-
SHA256
3132bb867d42ed85143c47752cac9411a0ab1fe93e5d59460a671504ef38581d
-
SHA512
6e77ff2f717523b5652cfaa81d663843e2aa11ee7063c81fbe0d8ec0c87a12ffa6e6f7926a1d6a63213a5671b4a8382aaccfae2aaaa7780cce56ca014b66ccc2
-
SSDEEP
6144:rdu3Rce6mJ6m1Id6Qi5dskw8vYQt775ye+aa2nu/+oS:Ju3Se686oQ6Qi5d3wQt77m+oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6998e8909736fbdbc0d0e34d36ce17fb_JaffaCakes118
Files
-
6998e8909736fbdbc0d0e34d36ce17fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KuNgBiM Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE