Static task
static1
Behavioral task
behavioral1
Sample
6f0ff9eb74c1b92b058e674f1ac36dd9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f0ff9eb74c1b92b058e674f1ac36dd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f0ff9eb74c1b92b058e674f1ac36dd9_JaffaCakes118
-
Size
411KB
-
MD5
6f0ff9eb74c1b92b058e674f1ac36dd9
-
SHA1
558e7a47e012d3a9f8f8404515b37b17755d53fa
-
SHA256
744399cf49f739275133875b5a648eda39db14aa02524686f28db92cd5093c75
-
SHA512
b7a2dd30ef7b8a51488ff4b4003bae0017c31cc4b99829179f44db2fa40a32a0acd6c2a0b26b873ee1564eb77cbaa3b1eca975a1cf960d52b962ead11143e8ff
-
SSDEEP
12288:tM9TvDORB0hFf2JazbNvs2WCCdhlRCcRfE:Op7O3OF+wzBvsdHzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f0ff9eb74c1b92b058e674f1ac36dd9_JaffaCakes118
Files
-
6f0ff9eb74c1b92b058e674f1ac36dd9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 392KB - Virtual size: 799KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ