Static task
static1
Behavioral task
behavioral1
Sample
6f7ddda8f38b644afa13211ced01756b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f7ddda8f38b644afa13211ced01756b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f7ddda8f38b644afa13211ced01756b_JaffaCakes118
-
Size
312KB
-
MD5
6f7ddda8f38b644afa13211ced01756b
-
SHA1
59631d2ce800829d7a47f5e1f04d72f0ebb26459
-
SHA256
1d5c3434159ba8f300b7fc23431611b9001329d9f91dd4517f4f36aeea6e5cd1
-
SHA512
ec3d435ac6d5c2638bb18ead6138662c7e5ce1d6af3af425f10351d921b3e90ccced58ecf332dffa68dc8332aedb196920582d7c457ef891b8135ca4334d678b
-
SSDEEP
6144:xvzHXJWGV8PM3VYNWMFug8dY4giq3l1XU4qa3rWYBeG3o:hz3IGQMELFudaviq3eKWYB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f7ddda8f38b644afa13211ced01756b_JaffaCakes118
Files
-
6f7ddda8f38b644afa13211ced01756b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE