Static task
static1
Behavioral task
behavioral1
Sample
6ad052e3b307b77be5e921937906d806_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6ad052e3b307b77be5e921937906d806_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ad052e3b307b77be5e921937906d806_JaffaCakes118
-
Size
734KB
-
MD5
6ad052e3b307b77be5e921937906d806
-
SHA1
e9360a196042fc3b6d5260d9ab30e48a17895828
-
SHA256
ff9b8bbc1a8c06f60893f6f3ca90ada0543593bf249827a692ed2e36bc452216
-
SHA512
8e59420f877bb35a5b8a62623b28e6787a979fe520591cfc6e0583e1314bd165c1144b04692f40817b2fcd5903464504507947d1f49059f65bdff04b00fe04dc
-
SSDEEP
12288:+omQKtL2Vu/tDvV34X7ipQSGK9m8tksregY70qyrByeHIQK2OquFeUz:gQKU0p4Xe1DgQIBQB/uH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ad052e3b307b77be5e921937906d806_JaffaCakes118
Files
-
6ad052e3b307b77be5e921937906d806_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 478KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ