Static task
static1
Behavioral task
behavioral1
Sample
6a6a3a3a897b01dee6dc20013be9fe67_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a6a3a3a897b01dee6dc20013be9fe67_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a6a3a3a897b01dee6dc20013be9fe67_JaffaCakes118
-
Size
730KB
-
MD5
6a6a3a3a897b01dee6dc20013be9fe67
-
SHA1
f89619dd17fad9edec96696e9c812e28bb59f09b
-
SHA256
3e34f439142c90196fc5895606343ad16b48a8f4526b20d720e18f21f2d70ac9
-
SHA512
223e42aabc307b18b56d2b6681f88cc6609d21ddc8b46db2d15f541cd99b51c3df5dfb93ad1038328c5e95b0f315a8b9d09549026574f4ccec079c96b460047a
-
SSDEEP
12288:f44SanRmvfUkYj8BfDUbAcxUrPyMOg8F9w4sF1BkoS:f4I8vfUkdmbAj9OgKO1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6a3a3a897b01dee6dc20013be9fe67_JaffaCakes118
Files
-
6a6a3a3a897b01dee6dc20013be9fe67_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE