Static task
static1
Behavioral task
behavioral1
Sample
6ad1b75bacc689e2ef45679919ccd6d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ad1b75bacc689e2ef45679919ccd6d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ad1b75bacc689e2ef45679919ccd6d9_JaffaCakes118
-
Size
29KB
-
MD5
6ad1b75bacc689e2ef45679919ccd6d9
-
SHA1
91fbff09e3325115a6a2082bbc90b7dcc594a752
-
SHA256
9de37744ee5b1d4cd1345838090df304ea22d930ef8cac1a6639dfca2bfaf701
-
SHA512
4c195b1161ba9dbe9620bb81f947c6c2bb967ada6e5951d6cdca23a1ca95aba0d1789386580f73b9e2cd1782cf41a1ba7ca514fb895ace71a905d694c6a2f66f
-
SSDEEP
384:CqCpEEo7GZzcaSXCBgezu72UC3EBmIbHXrADuCGEF810/t5kcpfQ1P5eprNU0OqH:CqC9/Bges2UpA/q1al+xYrD9S/c2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ad1b75bacc689e2ef45679919ccd6d9_JaffaCakes118
Files
-
6ad1b75bacc689e2ef45679919ccd6d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ