Static task
static1
Behavioral task
behavioral1
Sample
6fabcbd386809c5fb0edc7c896ee615b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6fabcbd386809c5fb0edc7c896ee615b_JaffaCakes118
-
Size
136KB
-
MD5
6fabcbd386809c5fb0edc7c896ee615b
-
SHA1
3c6f157eb5d7341d5b704c4459d78ab2b9025e9c
-
SHA256
fd51ca56176ca47c4d6e5c8abf689027c5ccbd03b7c74b1c45e1376e62fb89dc
-
SHA512
43acac6e704e72f38886caf68980b7ed0c57ded39c17a10d394abfde261b7a4d237709897794a089a42e65f3b1c19aaa3c78350b68dfc9f4a27c8a7ff9120ef1
-
SSDEEP
3072:sj4SxxPPsMP9xbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7p6vIE:7SxxPPsMFZwvP6bQ7yMP+DE827MwE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fabcbd386809c5fb0edc7c896ee615b_JaffaCakes118
Files
-
6fabcbd386809c5fb0edc7c896ee615b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE