Static task
static1
Behavioral task
behavioral1
Sample
6a35c945ff0dc6e13fee05cd785c9c1b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a35c945ff0dc6e13fee05cd785c9c1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a35c945ff0dc6e13fee05cd785c9c1b_JaffaCakes118
-
Size
117KB
-
MD5
6a35c945ff0dc6e13fee05cd785c9c1b
-
SHA1
3cb221a529cf31e11c9e2a29f75e6a7b35de6f0b
-
SHA256
5439dd8af2c527b29782a19aecf24ee4815d8e7465631d96c123ad2047844398
-
SHA512
147fe6609658640af2422841a7fbe91bf8ea67a378d48efbf45f3b48a95136c89c6b8f2c350ae026fcfb89f58d0a084cc20ef4acdf1a7d9461860d8589b14f37
-
SSDEEP
3072:7U4GN4V55ZV1BU+MRltN7Y7AhXuE4A2RY3lp61lCGaTwk9Y:7U4Gk55ZbBgbbzD563CGaTwkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a35c945ff0dc6e13fee05cd785c9c1b_JaffaCakes118
Files
-
6a35c945ff0dc6e13fee05cd785c9c1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xv8k Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c9c55v Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ur Size: 50B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE