Static task
static1
Behavioral task
behavioral1
Sample
6f58973efddd7909b2c7389c54ceb209_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f58973efddd7909b2c7389c54ceb209_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f58973efddd7909b2c7389c54ceb209_JaffaCakes118
-
Size
22KB
-
MD5
6f58973efddd7909b2c7389c54ceb209
-
SHA1
713ab7718d00e04abe19fcae5e41f4d55f83738f
-
SHA256
9311531e867e3494f59e35d92480b85fbd0e6ee629043102fd111bb9695fc8fc
-
SHA512
be9f5c25bc51ac0132b3107f938ae10d82b6b2c8b5f8a23c1b4bd5c63d3637364eced635921e29d987cf94e6326e0897d0728c87936a099544b4ced0c06088e9
-
SSDEEP
384:ecqc9wL+Ly+Lq+uq+w+x+D+4A+3+M+93+T+K+x+F+8+m+G+A+h+g+l+s+n+K+v+x:eHc9wi7LYB0KGO90an0ItjDRkxod+nWx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f58973efddd7909b2c7389c54ceb209_JaffaCakes118
Files
-
6f58973efddd7909b2c7389c54ceb209_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 32B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE