Static task
static1
Behavioral task
behavioral1
Sample
6fcc561315aade4e3cee1ea269195b44_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fcc561315aade4e3cee1ea269195b44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fcc561315aade4e3cee1ea269195b44_JaffaCakes118
-
Size
176KB
-
MD5
6fcc561315aade4e3cee1ea269195b44
-
SHA1
9d3b7a964d6164f12c6827e0fdafa593a4a6445a
-
SHA256
49e3dc39e9a56a70d343f1ee2348f69e12d458b5e9ed24b627f77d1c6b18e5cc
-
SHA512
08bb4b7f0b663f6e06cfe38cb0e409190e364e1879654580eef8f6d44ed4d6f464d4ac0107d8d846deeb1d58f1c6f590a353f09a07604bb88e38bf0352244541
-
SSDEEP
3072:jxIQ/Ch2yvNQCsUMYLAuUoD7Slakzd9zYsBuOH/060qEa9G4x0ahlQoutQ:jLKXCUMYLApoD7p4jYf6s60HeG416oSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fcc561315aade4e3cee1ea269195b44_JaffaCakes118
Files
-
6fcc561315aade4e3cee1ea269195b44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE