Static task
static1
Behavioral task
behavioral1
Sample
6afaaeaa7f4d3a68741e391ede318e96_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6afaaeaa7f4d3a68741e391ede318e96_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6afaaeaa7f4d3a68741e391ede318e96_JaffaCakes118
-
Size
354KB
-
MD5
6afaaeaa7f4d3a68741e391ede318e96
-
SHA1
04146637d2d76740775661167e6b36a30d23cc9f
-
SHA256
919eaf38b49cd1a3a5a2d43e4ece94f5f0cdeb0c05300f3a09bc0a2e8903c827
-
SHA512
2a9de253cbd3889c975a90f3efa5eb85adc08513d6f9c183c68f50afb0fa4e9039e106e78c8abb20de5aed77eab543f5296bcd799020ace88f1c404d462a2969
-
SSDEEP
6144:FhK4gBhKGv2hXh9UprXgdhlJV65jgRDCegIuz/+SdqWNnsMpbiQ4bl6KvLZOBAh:FCBhr8h9UprQdhl7o8aaO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6afaaeaa7f4d3a68741e391ede318e96_JaffaCakes118
Files
-
6afaaeaa7f4d3a68741e391ede318e96_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 288KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE