Static task
static1
Behavioral task
behavioral1
Sample
6a576484ecd654848f67d482200872c6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a576484ecd654848f67d482200872c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a576484ecd654848f67d482200872c6_JaffaCakes118
-
Size
832KB
-
MD5
6a576484ecd654848f67d482200872c6
-
SHA1
8253e3da604fc7257a5c6b28cb849e5ddabaa782
-
SHA256
8ba6ebae92ab2744e73935571578a60b0fe9a3dc66852862b30510b80f97cc10
-
SHA512
ee27364a620efbd0c3000a14adb210373932c0cc079210a8f2b099646478747a837aa52e098f303c181ccaf6d5c682ab424d559ba697406bc656583f8f28d325
-
SSDEEP
12288:0rDYFHy3M3yN7W29bWqAUndRfQoa1sbdbcnyYOWDY8p0gbYVIpTBnBhgTV4MWA9:0HUjQbn7zaOcWup0e2IpdBXMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a576484ecd654848f67d482200872c6_JaffaCakes118
Files
-
6a576484ecd654848f67d482200872c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ