Static task
static1
Behavioral task
behavioral1
Sample
6f06b0541e3e0840e25d3f3f1c23e920_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f06b0541e3e0840e25d3f3f1c23e920_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f06b0541e3e0840e25d3f3f1c23e920_JaffaCakes118
-
Size
364KB
-
MD5
6f06b0541e3e0840e25d3f3f1c23e920
-
SHA1
b8a831838e20c5c2b2a9c3d9aff76b31ce255116
-
SHA256
446230c3796f41a988a634ab2e9b5ba281552e948586206d3c4d86835687e8b9
-
SHA512
19fa6bc7cc2e4a7785b5232406c68920104ecdff5c001777bd6d9a18c22b1f375d09b1b8b1798c7836af0119971fed489f7082f4c7a4a3e3782f47bb832e7810
-
SSDEEP
6144:V3E8zYJwZQW5lnRtpxKTh+fP3kRlumkJNMV:arJ7YlJKEP0RlumKMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f06b0541e3e0840e25d3f3f1c23e920_JaffaCakes118
Files
-
6f06b0541e3e0840e25d3f3f1c23e920_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE