Static task
static1
Behavioral task
behavioral1
Sample
6f3c04188d4294db3c610d3664d65e19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f3c04188d4294db3c610d3664d65e19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f3c04188d4294db3c610d3664d65e19_JaffaCakes118
-
Size
56KB
-
MD5
6f3c04188d4294db3c610d3664d65e19
-
SHA1
7a68bf15b3b3c49d9007fc9a7ad152b20ab00ed9
-
SHA256
16a4bf5e1ad0b894870efe02dbb4792e9fa72c96b1f53962237c322ce3e117bd
-
SHA512
920dad5a7c855a93bcf03bc60e3912e12101b94bd2dcacc838170c6da3cf3155f3cc52042b4aa429ee588ded699df644316f0e113b6964ce3cb579e781f0f318
-
SSDEEP
1536:a5dkKzUKVDkkoF73UAHyGlGDntk8JROwKEHTO8aJ:udkK4KVDkJ7XvGnwwzTO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f3c04188d4294db3c610d3664d65e19_JaffaCakes118
Files
-
6f3c04188d4294db3c610d3664d65e19_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.etr Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.etr Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nah Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nah Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ