Static task
static1
Behavioral task
behavioral1
Sample
6ab01772d2277b78d2b758416a83d070_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6ab01772d2277b78d2b758416a83d070_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ab01772d2277b78d2b758416a83d070_JaffaCakes118
-
Size
353KB
-
MD5
6ab01772d2277b78d2b758416a83d070
-
SHA1
eb9739d1e5e72a8fc0eb44622149a6b74b817d8e
-
SHA256
4d550b170bb08bcea79dc739c052ff1dfb3efbfa9a1230534922717a311bcb1c
-
SHA512
73972694ed9b5482c8a871be624990445c72813449c4519b1ce4240520382a94e4a595628070e443bac209e6eb55771dc34ee1986fd7ca8d0558a8fab1c7d0b2
-
SSDEEP
6144:KLW0KYuzHouDfdX0vPrv6moZOycP+PTKqTsE9jz2+P//oS:mDj6XErymBKP9N9jyw//oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab01772d2277b78d2b758416a83d070_JaffaCakes118
Files
-
6ab01772d2277b78d2b758416a83d070_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: 2B - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE