Static task
static1
Behavioral task
behavioral1
Sample
6a9ee39f93dc9b6d05c1f6d76a553231_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a9ee39f93dc9b6d05c1f6d76a553231_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a9ee39f93dc9b6d05c1f6d76a553231_JaffaCakes118
-
Size
2.9MB
-
MD5
6a9ee39f93dc9b6d05c1f6d76a553231
-
SHA1
1052010031f9674e8411cbe7712e1090d73c4073
-
SHA256
d6dd07142d0921a0581fb6a3d26ae8f6c4c46ba5ae25ec6beee1df5a2e3f99ce
-
SHA512
671209f1e759c3bba2252fc8f9816b4c7ce461ce3d58698a4aff602c9a1188f8991bf2067883583b7304bb76c2db93fa5c91f5afa4e7f10c4aa099dc355f9f17
-
SSDEEP
49152:Q2jkeVMfwiXW6+D2Qjrvvm4CMI2+3kaZAIVzPEE5fjmBlYwNXskSrzaZ9f2Pm0la:DjkeGfwiXYDtv5T+8IxPEE5follXskSE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9ee39f93dc9b6d05c1f6d76a553231_JaffaCakes118
Files
-
6a9ee39f93dc9b6d05c1f6d76a553231_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE