Static task
static1
Behavioral task
behavioral1
Sample
6f8aeb74a208d6ae9f356ebf04c32a0b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6f8aeb74a208d6ae9f356ebf04c32a0b_JaffaCakes118
-
Size
235KB
-
MD5
6f8aeb74a208d6ae9f356ebf04c32a0b
-
SHA1
b9ddfb9949f8df8df533bdfcc12621764cda5a81
-
SHA256
9ddd91dada23fec07d173c00635a138097a9088ee7f40d51c124488e164dacd9
-
SHA512
d26f9c7bc8f95ffcf6c5b7ecc3e4cc8c0143363dc669622562c229acabdc7a453fa719c9ccd41d5ad3b5b2a104a26edb8fafee6a307201c6e7d180320de8e704
-
SSDEEP
6144:UojLHrn4Mx05YTutt62fFX6KOaoJFFd9CJc0ya:XHrnskuth6KOfFgJcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f8aeb74a208d6ae9f356ebf04c32a0b_JaffaCakes118
Files
-
6f8aeb74a208d6ae9f356ebf04c32a0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ