Static task
static1
Behavioral task
behavioral1
Sample
6ada1f634013ae5bbc81b92b8695625a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6ada1f634013ae5bbc81b92b8695625a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ada1f634013ae5bbc81b92b8695625a_JaffaCakes118
-
Size
4KB
-
MD5
6ada1f634013ae5bbc81b92b8695625a
-
SHA1
b253e73f1f7eb46eed52748b666f7cf73849579d
-
SHA256
17cd98fd7961a9f14924c225262593683afadd98e6730fcf3c318f878a9f5ac3
-
SHA512
071e96585df2bba2548b468bc350281adc87018f2fab437492605193a23350aac01b298ea3750e1cacf448242f482f2b7c0593007d6ded439c410b9762a0c955
-
SSDEEP
48:6+qTLxvt+Pqzry5PnUpB/S1cYzr66NaYJiSolIKEVB1BtsehEW2QGI6ctbcSen/i:/qTLxl+PqzO/9W6R3LT2ojSUOogOGOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ada1f634013ae5bbc81b92b8695625a_JaffaCakes118
Files
-
6ada1f634013ae5bbc81b92b8695625a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
REG Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PATCHER Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODED: Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PB Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ