Static task
static1
Behavioral task
behavioral1
Sample
6f6b1d9c39053b7c4b0d5825f91bbda1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f6b1d9c39053b7c4b0d5825f91bbda1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f6b1d9c39053b7c4b0d5825f91bbda1_JaffaCakes118
-
Size
25KB
-
MD5
6f6b1d9c39053b7c4b0d5825f91bbda1
-
SHA1
12270ce253d6d64dbd89a2df2a9137d36719e147
-
SHA256
1f962340bb0bb7c5cb8ca29d40378cdcc1372ea395749f43c1818f49ee67446d
-
SHA512
954d8d03d226647de566a3962cfd5667029e6963ce58597772b826005d4a8eb46e22ec276866c44a48d2563d5614fa7772900d6796b41f961d8febb3d5e8b13a
-
SSDEEP
384:BVAsuk2vD0iJNKUc6886XwqG2BIXucs9YV4lfK9tZGyIOHTJa8aWNVvz+ozYKiX2:fGk2rzcJiqG2Aucs9Pmt4hOHTLNNVu2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f6b1d9c39053b7c4b0d5825f91bbda1_JaffaCakes118
Files
-
6f6b1d9c39053b7c4b0d5825f91bbda1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE