Static task
static1
Behavioral task
behavioral1
Sample
6f5bee43d32e5eefb5948daed8baa3d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f5bee43d32e5eefb5948daed8baa3d9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6f5bee43d32e5eefb5948daed8baa3d9_JaffaCakes118
-
Size
8KB
-
MD5
6f5bee43d32e5eefb5948daed8baa3d9
-
SHA1
3537406db189bf60b41d30105fd06cee57d85d40
-
SHA256
966e9f2b510b5866188dbffa9cd9fa5495952bbdd251cbbc001a47ef6736c843
-
SHA512
1422478d82b284f386f7e73995628c99ce5f54c791bf081df8554b150c21176dc2a086f54f680801d630a8db8b04479911525b2519aed4ff84d7b4a7da253926
-
SSDEEP
192:sHRZemYamx3hrA8B6aEpoftR2qBPUUR8WQBpUz997L61cU+WrqzRL:srzmx3hxB6aES1FGRKzj6Hmzl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f5bee43d32e5eefb5948daed8baa3d9_JaffaCakes118
Files
-
6f5bee43d32e5eefb5948daed8baa3d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE