Static task
static1
Behavioral task
behavioral1
Sample
6f20e7040f62ed219a73d8b361eaa317_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f20e7040f62ed219a73d8b361eaa317_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f20e7040f62ed219a73d8b361eaa317_JaffaCakes118
-
Size
111KB
-
MD5
6f20e7040f62ed219a73d8b361eaa317
-
SHA1
e3cd9242e77fdfa4d854710fe89c516cfb21b286
-
SHA256
9257dba043477929f520eda38f575cdbde8e5426ddb95a260477771a2a2d12d3
-
SHA512
137f01e23894e8dcbbe40c93c56a45574fa52fdef74d2482b27e8d04b4c48e104669ff089d5e3332cb8e592bd96d02a9ecfbd1658379c1208700a1e90b807e2c
-
SSDEEP
3072:6VQi9HJjDwziZl7uebbIOVhban3J2hkg7S:6VhjDwKbIO7a5C2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f20e7040f62ed219a73d8b361eaa317_JaffaCakes118
Files
-
6f20e7040f62ed219a73d8b361eaa317_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
zc Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
geiuu49 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
797c2l Size: 710B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE