Static task
static1
Behavioral task
behavioral1
Sample
6eecfad91ccb76ee0ff3c18abd11f8f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6eecfad91ccb76ee0ff3c18abd11f8f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6eecfad91ccb76ee0ff3c18abd11f8f0_JaffaCakes118
-
Size
435KB
-
MD5
6eecfad91ccb76ee0ff3c18abd11f8f0
-
SHA1
53a5f793e419614f2bbcdacefe9765c129a339b5
-
SHA256
c05adb9fbe8df3e772c5258824b6c6ed9033cfc10c5807c3b551aa07bc8ac7bc
-
SHA512
cc4ce3e6c39a8da41b725f778566a4349a91a99f5c30b31d31f8b6ecc1b59480aabfed34f26d660d0f96796fa28e797ba237d9db2e8a12cae5bc43eb42d01d49
-
SSDEEP
12288:ASvkY/o65nmvsT4BeYRSUDjyrGxL4oykhK0YP12ROMn2:AK/fQsT4BeY8UqSL9yqNYNan2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eecfad91ccb76ee0ff3c18abd11f8f0_JaffaCakes118
Files
-
6eecfad91ccb76ee0ff3c18abd11f8f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 430KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE