Static task
static1
Behavioral task
behavioral1
Sample
6fa533b1906bb056fabd51cfc3d548d0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fa533b1906bb056fabd51cfc3d548d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fa533b1906bb056fabd51cfc3d548d0_JaffaCakes118
-
Size
210KB
-
MD5
6fa533b1906bb056fabd51cfc3d548d0
-
SHA1
ea2201bfc8aadde475b4b69906288831cc7439fd
-
SHA256
397e2d788419f7dd26fd0b5a1c16c07229384fe0b7bc71b0be2c0189defb0f00
-
SHA512
0e5eabc1dd9a58c98b0739b9368a8827edabcd281465d0085fdb5e5426b0dc595a360aa933573261bef88719978ccbdbba715c289df816c3a4db3ff1dbc2874f
-
SSDEEP
6144:B+dQX3ReRw3JcsS/0mfkL0u01anxGwAs:B+d0RPJEfB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fa533b1906bb056fabd51cfc3d548d0_JaffaCakes118
Files
-
6fa533b1906bb056fabd51cfc3d548d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�`<0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�`<1 Size: 76KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�`<2 Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ