Static task
static1
Behavioral task
behavioral1
Sample
6f53bbc6742f22b3589075d4c5c26794_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f53bbc6742f22b3589075d4c5c26794_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f53bbc6742f22b3589075d4c5c26794_JaffaCakes118
-
Size
154KB
-
MD5
6f53bbc6742f22b3589075d4c5c26794
-
SHA1
74af8e0d9e1dcd74760c81e409d015c859d4b441
-
SHA256
b7bb1c59c68676a8743245dbd090a021824800ddee0b820d6221279c6d6585c0
-
SHA512
5fe34b7e28d09c549906383c853e5c9882d33e9c45bf960f22a562435541c948254ca3d9ecd3e542c2ce99a2566e3871f89aab6ff682245d72407e04b1ee60da
-
SSDEEP
3072:8M/mTkUbnweLk394KB9r6LZCYOUTk9pP/nh7Gu3rk2GZj6z:5Ubk3L6L8kY7P/nh7Gb5N6z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f53bbc6742f22b3589075d4c5c26794_JaffaCakes118
Files
-
6f53bbc6742f22b3589075d4c5c26794_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ltBH Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fte Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RB Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l7L Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE