Static task
static1
Behavioral task
behavioral1
Sample
6fd5d466ef0658f0928803c2f902ed22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fd5d466ef0658f0928803c2f902ed22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fd5d466ef0658f0928803c2f902ed22_JaffaCakes118
-
Size
91KB
-
MD5
6fd5d466ef0658f0928803c2f902ed22
-
SHA1
24802b5a2703f4fb2d551c674cb4f6a36512d426
-
SHA256
3d22223c254a361713bfd58bdfd521687cd74abdf7a45d0d029a357f3875f05a
-
SHA512
ab65dc3e864856ebadebe5ba86fc85dc321a6ce8423b4a93a9bd265d0d53da000113916d19b2aee293cee26ed06c2a760e3f3bf3106ba70a2fb572ce75d14458
-
SSDEEP
1536:h/WNQ248Dxv5sHnwnEBJabP9tnzpssHRk/NwGDDrp5cDReQJ4Yc2NgBm0G4Ik0BW:h/WNQuEabP9lzRa/NwYl5+eQJlc2tzUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd5d466ef0658f0928803c2f902ed22_JaffaCakes118
Files
-
6fd5d466ef0658f0928803c2f902ed22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE