Static task
static1
Behavioral task
behavioral1
Sample
6a63b45512a681953ad09e0fe079a5d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a63b45512a681953ad09e0fe079a5d7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a63b45512a681953ad09e0fe079a5d7_JaffaCakes118
-
Size
141KB
-
MD5
6a63b45512a681953ad09e0fe079a5d7
-
SHA1
1e577630ea0e3d1613f82504c10b0eb879f7eded
-
SHA256
04d3569ddf997df4dc9936fc3ed07a13d861a2645ef1595c957cdcaf8f74fa2e
-
SHA512
08a3ed56d069cff165e5a451ce99a638349c73ac59d559e236d63651b7c545f0f69ad1c29c34a43756dd3972e165edc3c959c27ace568f27b3bb69478b0eb04a
-
SSDEEP
3072:p4aL7DAe66Pd5xmZlBlYM2nG1CByzMJhtC4/fub+jvA:LMOYfBl2niGywV/fuSjvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a63b45512a681953ad09e0fe079a5d7_JaffaCakes118
Files
-
6a63b45512a681953ad09e0fe079a5d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�� 50948 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� 50948 Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� 50948 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE