Static task
static1
Behavioral task
behavioral1
Sample
6a60125734fe34c2f8654b809c2aa296_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a60125734fe34c2f8654b809c2aa296_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a60125734fe34c2f8654b809c2aa296_JaffaCakes118
-
Size
22KB
-
MD5
6a60125734fe34c2f8654b809c2aa296
-
SHA1
0f4a11895eb78e99f1ae4d8c8f71f0d186a5a1de
-
SHA256
1c8846c9eff2b4f9ff40ea662f72301ce145aad79f793916903750f348b59a10
-
SHA512
accb73ee2af8473b779d243fa8ed7c17aa1f665d8dd243e3c57fab6b601f9b9bbb06cda1aefefc063201b2a5f5409c9f7026cd26351d31239d30117612531824
-
SSDEEP
384:3wDqzRZfNjHtT3zN7GXHSVE6mHb1sR5ijsnQgW55Fu3diJMYzP8:3eyljNT3JW4mqR5ijatwa0J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a60125734fe34c2f8654b809c2aa296_JaffaCakes118
Files
-
6a60125734fe34c2f8654b809c2aa296_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
G �c1�_ Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'PW��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE