Static task
static1
Behavioral task
behavioral1
Sample
6ab3f57017e30d7e9ea2f14d0eb92e81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ab3f57017e30d7e9ea2f14d0eb92e81_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ab3f57017e30d7e9ea2f14d0eb92e81_JaffaCakes118
-
Size
48KB
-
MD5
6ab3f57017e30d7e9ea2f14d0eb92e81
-
SHA1
36b11e5d1ba879906c62ef06fd2bc448852b8e78
-
SHA256
b6edf452083ff92b24e92f5f1f6043f075b1b6f7a5deb28672310a9df55b9834
-
SHA512
9e83e218332c5de2c21a4d01d6ed3000a61dac1523a0f3dae37834f7ebecb184e56738ae993fa8a19c762e77d550b6ec6a562755191d5a8741ec42d283d64b08
-
SSDEEP
192:uUQ+VTX9lRmLkA337hcTEkd9oUuuS8Te3nmB0dZa190+kuWY7Hinog:p3LlWFcYkd9TOO390/uWYD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab3f57017e30d7e9ea2f14d0eb92e81_JaffaCakes118
Files
-
6ab3f57017e30d7e9ea2f14d0eb92e81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE