Static task
static1
Behavioral task
behavioral1
Sample
6aebcd26b17e320fb257633fa19ccbd8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6aebcd26b17e320fb257633fa19ccbd8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6aebcd26b17e320fb257633fa19ccbd8_JaffaCakes118
-
Size
57KB
-
MD5
6aebcd26b17e320fb257633fa19ccbd8
-
SHA1
bec2ba3d6612580d542e0047c873cf3c739dca05
-
SHA256
9cd0fc6ceed14cbb9e81364640b8c1415cb5878f90f9b046dc58b20e19e0d985
-
SHA512
b81b03f59f9500486762aaa3c7a0dc5c000080ff3848ba0327a8ad5289ed5ecd53d909145289c6f93f2190a8fb19329dbcad9d8644c699750aa3eeeda74d0aec
-
SSDEEP
1536:X5DA4eWJ/JSgHDs1Aov788o7PC5XOcSptZSvs3EfcVhmBvr6:X1A4eg/J5HVozj2SOcSptnEfghmF6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aebcd26b17e320fb257633fa19ccbd8_JaffaCakes118
Files
-
6aebcd26b17e320fb257633fa19ccbd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ