Static task
static1
Behavioral task
behavioral1
Sample
6a876ac076d896da1fc2e997c41f481f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a876ac076d896da1fc2e997c41f481f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a876ac076d896da1fc2e997c41f481f_JaffaCakes118
-
Size
214KB
-
MD5
6a876ac076d896da1fc2e997c41f481f
-
SHA1
9febe6ef709bead71093aff1f00fcc94ccd1eb45
-
SHA256
e321fef68908f2c923e851c2ef935dd22874ae7239b2429d4d95830d1b2c4dd1
-
SHA512
7716dd6803dd927b8492d9a2afbc6714d21493c60366d60c5c27110b4468d57df117364e741a6da834bf78a8472683cef814229deace70d3ed4e4e16f7f1c9da
-
SSDEEP
6144:BAay+7A5dtfpUnLsoCQMy//KlXi9yFI0:RA/tfp7oDIS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a876ac076d896da1fc2e997c41f481f_JaffaCakes118
Files
-
6a876ac076d896da1fc2e997c41f481f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE