Static task
static1
Behavioral task
behavioral1
Sample
6a4d5aa8a13d6caf43c421bbfe0d939c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a4d5aa8a13d6caf43c421bbfe0d939c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a4d5aa8a13d6caf43c421bbfe0d939c_JaffaCakes118
-
Size
747KB
-
MD5
6a4d5aa8a13d6caf43c421bbfe0d939c
-
SHA1
ab6d5bbdf6eb05c0c39bf9991275a423b565f3ee
-
SHA256
1f40d3647c1de85ccf994ac027022e274d971e34ac28c8cde3794725200cb2c9
-
SHA512
37b3c3fc6c5339c73b594f04433fbd7e41cf80edd5193d9342f468f234311f76b3f7e4b0a6f5e19d564eb34a4c09fd8e1ad5470b80cfa8c8ab155bfe067d3dd7
-
SSDEEP
12288:GBzZI2tjkQqkBsj/U1+qcVxg/FWLVXhNMBhqrsK/LZ+zApDl3tzqn6:QFIikQqkBv+quxgNEDWBkRLZ+Ev3tq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a4d5aa8a13d6caf43c421bbfe0d939c_JaffaCakes118
Files
-
6a4d5aa8a13d6caf43c421bbfe0d939c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 11KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 732.0MB
.mjtxfk Size: 576KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aaylif Size: 151KB - Virtual size: 152KB
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ