Static task
static1
Behavioral task
behavioral1
Sample
6a6aef41e190897c13d0cfd59be41f5f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a6aef41e190897c13d0cfd59be41f5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a6aef41e190897c13d0cfd59be41f5f_JaffaCakes118
-
Size
100KB
-
MD5
6a6aef41e190897c13d0cfd59be41f5f
-
SHA1
5592fc6284459bfdff5303bcdca3d1c6c7ff6380
-
SHA256
5e7c59d640f3643f75ce8c85b10a03eb9b2d87cd8577a21f26661325e36f4526
-
SHA512
2b183967989f0d90ee865078ad97d8bbce4fd902d5401f65bd767079e1a62d7a9cd3fc0b231a0d1e83591c5cf9332d9a174dd6a15cfb40f8cea54aae29f2a29d
-
SSDEEP
3072:UXAcnFCAxwjJ4nL8DrCK9/5z27cfTxoHG9na:cA6FCl14ngDOK9xzucFoHG9a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a6aef41e190897c13d0cfd59be41f5f_JaffaCakes118
Files
-
6a6aef41e190897c13d0cfd59be41f5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE