Static task
static1
Behavioral task
behavioral1
Sample
6fcf6cdfc1f3d9db6f5256f3fdb8730c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fcf6cdfc1f3d9db6f5256f3fdb8730c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6fcf6cdfc1f3d9db6f5256f3fdb8730c_JaffaCakes118
-
Size
97KB
-
MD5
6fcf6cdfc1f3d9db6f5256f3fdb8730c
-
SHA1
755e8988418a89c64219d358c3fdfbd810a9052c
-
SHA256
b4fa06f966f01e6ebf1b3b1b45a2cb639a32fb5ab050218b6f7bc35f40c9c5da
-
SHA512
8ea4ac39a69ae108ebe04c69f0599d0c2562bfdf5637c0bb66199ca356e13c1254778098918e1c7837358ac564564f490d699c272e3a84ad82cab9ea2c071319
-
SSDEEP
3072:TDulXQNrsqp0c6INA2sjwt5Szl6X2Suok:TqlXQNrsqpp61XMvSp6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fcf6cdfc1f3d9db6f5256f3fdb8730c_JaffaCakes118
Files
-
6fcf6cdfc1f3d9db6f5256f3fdb8730c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SHD0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHD1 Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE