Static task
static1
Behavioral task
behavioral1
Sample
6f544c939b04db251e102693c79d26b6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f544c939b04db251e102693c79d26b6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f544c939b04db251e102693c79d26b6_JaffaCakes118
-
Size
61KB
-
MD5
6f544c939b04db251e102693c79d26b6
-
SHA1
91de77b50ddad691fee1f1e16b68ac2760c6a606
-
SHA256
4997ecd1ad671cd10a8a00e0683c4cfb7999b38060c8916238fc4f941851f124
-
SHA512
b9ce435e60e0b358189b83b687294eb4b50c597f02cb9444f915f59f48ba82ea726978a5b4a6c9101b084dcf455826b0ab49898be13768f1ed5b36f4ad1412f4
-
SSDEEP
1536:4v2u9fdfi2RJS7Ckx6rVfu/cyXHxi4C7F/krtNhWN:lqA2RJ9kxl/cYHxilJcx6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f544c939b04db251e102693c79d26b6_JaffaCakes118
Files
-
6f544c939b04db251e102693c79d26b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ