Static task
static1
Behavioral task
behavioral1
Sample
6f3a138735ba39753f1e74e977244489_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f3a138735ba39753f1e74e977244489_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f3a138735ba39753f1e74e977244489_JaffaCakes118
-
Size
224KB
-
MD5
6f3a138735ba39753f1e74e977244489
-
SHA1
99459a238d763d42217b4f68743cebf097d3f5c5
-
SHA256
2e2657f1ec87e2c6bcf8689074d4e1387286fa2a645d0091bfa00d9decbab281
-
SHA512
98a29fbb859ba302b62e9475c25d1e2e7bf7c0e2fe0b5bbd37e11fad2bac2925324db5debfeed93dd609bb437688be2370a2d718cfb52a07a3e43b0885693247
-
SSDEEP
6144:+nD0Mnye4ieKwzRpm5DIP7szyt7P7KT/HmgYX65CBv:+nDNye4UORIDIDsza7PmHmjXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f3a138735ba39753f1e74e977244489_JaffaCakes118
Files
-
6f3a138735ba39753f1e74e977244489_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 171KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rorg Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE