Static task
static1
Behavioral task
behavioral1
Sample
6f454cf4b6006fd3f5ddbfaeb33750ba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f454cf4b6006fd3f5ddbfaeb33750ba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f454cf4b6006fd3f5ddbfaeb33750ba_JaffaCakes118
-
Size
976KB
-
MD5
6f454cf4b6006fd3f5ddbfaeb33750ba
-
SHA1
c19b515767c21ba8a2647182567064a11a2cbf90
-
SHA256
2d50c7a4049bca0257fbeef74aaa4f50888276a83b88f050e79364e7383d6cdd
-
SHA512
08fffeb178f46b88fba80fe25a81a952095e7922c3aaf58133c5fa3eeac14f93e263d8fb78b88b6869b2bf82c2555060bce08274eaac05f2df52f47094b8fcc9
-
SSDEEP
24576:T3YdyAeukW5AJJcZlmRhzogTSvvN/5icIKAV7W:T3YgHclK1E/5ipjV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f454cf4b6006fd3f5ddbfaeb33750ba_JaffaCakes118
Files
-
6f454cf4b6006fd3f5ddbfaeb33750ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE