Static task
static1
Behavioral task
behavioral1
Sample
6abd5cabeef5d0bf1143b748b8438191_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6abd5cabeef5d0bf1143b748b8438191_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6abd5cabeef5d0bf1143b748b8438191_JaffaCakes118
-
Size
10KB
-
MD5
6abd5cabeef5d0bf1143b748b8438191
-
SHA1
d67126af438265def961c78f4b9c7bbcc17d7bed
-
SHA256
2eb4624436990b6742b62f3b96baa69fdc35d09781b27fa7fa9c59f94666bf9a
-
SHA512
642b0c5510e534a207804718808da87f973dd5da97da1a69eb544d2dcd414c8d09e49620099e234a5f08340f07222691347bdad1bb9b9ce9cbcc8f0f1a99be92
-
SSDEEP
192:vJGc1Zl2+VAfNxl1THs6xgzgVGjPlR1L768nQAlKhFo22Xs6Z0:vJGcMJxDTHfRm7Fc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6abd5cabeef5d0bf1143b748b8438191_JaffaCakes118
Files
-
6abd5cabeef5d0bf1143b748b8438191_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE