Static task
static1
Behavioral task
behavioral1
Sample
6f2cb971c546356a6cf835cd8a973155_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f2cb971c546356a6cf835cd8a973155_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f2cb971c546356a6cf835cd8a973155_JaffaCakes118
-
Size
110KB
-
MD5
6f2cb971c546356a6cf835cd8a973155
-
SHA1
8b2f3d7dfd9e4f9dc7bb4c24a27ee56b1fd8cfe1
-
SHA256
375a840867013808212868248738c23da76ca1b56578b0b51da20b270cc296c5
-
SHA512
0af9e22258adea46b67703d68c4bec6d4a44b09c333c5f6cf38c6f00ddba2f35a4c0dbb5ae38edb0259dda832e07befafd25396aa872b4456ebffc16172f2d06
-
SSDEEP
3072:WFKBLP9fIJgRaVWjFNT/I6qObx4J2vNbGfvGnd3gW5ZM4/u:FLPJIWrrU6bNdndPZMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2cb971c546356a6cf835cd8a973155_JaffaCakes118
Files
-
6f2cb971c546356a6cf835cd8a973155_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE