Static task
static1
Behavioral task
behavioral1
Sample
6f5b4d5f921177140f6a9a6a622da66f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f5b4d5f921177140f6a9a6a622da66f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f5b4d5f921177140f6a9a6a622da66f_JaffaCakes118
-
Size
35KB
-
MD5
6f5b4d5f921177140f6a9a6a622da66f
-
SHA1
314d5cfcd953fbf83e12e4167f12f3518dc241e0
-
SHA256
57aed1365006e582aab24bb5e664cb62ec355f8f6162ded55c0d029b441e3163
-
SHA512
b41de6fb38c62fe20eaf3a92c8972a0815dbb0ae627439ee8d4d9deaac093a8fd05a6ca651442f1980dc48604210312dc77a598a9846ff9f91d12bf375c46eb7
-
SSDEEP
384:fqI6N74k78UF6b5pqeYOq88eqJy4VdlVYF6/ylFW76JcioS+W4wlgQaBkE3uFjEQ:fO7986nBk4b66/ylMeJh+N7sjII+a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f5b4d5f921177140f6a9a6a622da66f_JaffaCakes118
Files
-
6f5b4d5f921177140f6a9a6a622da66f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ