Static task
static1
Behavioral task
behavioral1
Sample
6f9aeff9ed3ad1f6251a03ebeaf6439e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f9aeff9ed3ad1f6251a03ebeaf6439e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f9aeff9ed3ad1f6251a03ebeaf6439e_JaffaCakes118
-
Size
367KB
-
MD5
6f9aeff9ed3ad1f6251a03ebeaf6439e
-
SHA1
939a918576dc2d6632d4d8b5e9d1020fe8099108
-
SHA256
372cd78e346949d74c553110a94de86d541e2f7ef96c2e4ef60bff3a505deeb7
-
SHA512
e0fc8c07dfa13a2e7907fcab093a62b43189b4f616cc237a88fe6b81ef657a734bb31dbb41a77e73526c16a31dd39b11f3ac32c41d17dec76c63141be35bf0cb
-
SSDEEP
6144:Nr5R/UZxrIbwmLbgXTX9Y4SWyjiM40OjWJ+KeDkgt298/BFN2p8r8o3IQshsokqs:3R/U/MnsWlOjA+KPKvMp8v5okgUgPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f9aeff9ed3ad1f6251a03ebeaf6439e_JaffaCakes118
Files
-
6f9aeff9ed3ad1f6251a03ebeaf6439e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
����8� Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����� Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����`� Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE