Static task
static1
Behavioral task
behavioral1
Sample
6a09fcd05528b7a5ce069de5cb8e5d34_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a09fcd05528b7a5ce069de5cb8e5d34_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a09fcd05528b7a5ce069de5cb8e5d34_JaffaCakes118
-
Size
46KB
-
MD5
6a09fcd05528b7a5ce069de5cb8e5d34
-
SHA1
d03d4c1eb9b73ad2809af63e75b4d024143df22d
-
SHA256
b54e707b6ceff561dafd84f1109977dbadc2393fe996b11720dcfbdc9eb23e1e
-
SHA512
3844968f569dbc754988e876892e0b3797bbd326a1e14d0f6c45bf986009c29fcd74ee339b8f254db9c6afb427f0521d026efc5c306037b1a81431e11b23a503
-
SSDEEP
768:INYRdMqMM2EB7Iey72j4XBcNm3oPK25quEq/mfOa8HMhpKKjVc0/frq3:INcMqM8IeW2jEBgm4PzhEq/mf2syKpZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a09fcd05528b7a5ce069de5cb8e5d34_JaffaCakes118
Files
-
6a09fcd05528b7a5ce069de5cb8e5d34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
YQG0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YQG1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE