Static task
static1
Behavioral task
behavioral1
Sample
6f8bd406033f674a4dce68a7a88c1124_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f8bd406033f674a4dce68a7a88c1124_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f8bd406033f674a4dce68a7a88c1124_JaffaCakes118
-
Size
754KB
-
MD5
6f8bd406033f674a4dce68a7a88c1124
-
SHA1
d16344258cffba78c63607965776b94709cbcbe0
-
SHA256
052a3ffbf1dea0cf954050cf582aa7f8e70842052ed5da624f66fe50c4c94573
-
SHA512
94960424c947919636118ad70ad591a42974bfaf100467dfbca98769448169c85e5edc0f69d8f6c695d919fa93c6a107f675f743fe3f7244fc76e24b2c416e38
-
SSDEEP
12288:bziTCIIyQPYf82v4qeO90NQUYLuAwgY4gZF3Z4mxx5kfgNDzG+rc6:n3yH8MeI0NqOgYJZQmX5VNDxrc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f8bd406033f674a4dce68a7a88c1124_JaffaCakes118
Files
-
6f8bd406033f674a4dce68a7a88c1124_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE