Static task
static1
Behavioral task
behavioral1
Sample
6f0ee1636be0d348feed7e52ea53fc9a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f0ee1636be0d348feed7e52ea53fc9a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f0ee1636be0d348feed7e52ea53fc9a_JaffaCakes118
-
Size
370KB
-
MD5
6f0ee1636be0d348feed7e52ea53fc9a
-
SHA1
f052c09f52db2469d15a59a36322c70219513c3a
-
SHA256
fe239c7001e53944d65b3851a39682ab0f67ec89a3664e38a3f09c4218877306
-
SHA512
26a65b71490fbfa58fada0313bbbcca6486b11ccd72ef070087df4809bf13b3165a1e09e0d8befacf966ce98455f885e3031180b475a3cc6127cc71df8d253dd
-
SSDEEP
6144:Nj6Bn+4MOasak9FCxVZ6SyLiSNVyvO1xekZPPV7tl8r+H2CpnzNAlnpyyu31+JuC:Z644MOasak9YDyLHNVVskhPJtl8r+Hnj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f0ee1636be0d348feed7e52ea53fc9a_JaffaCakes118
Files
-
6f0ee1636be0d348feed7e52ea53fc9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 362KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 365B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ