Static task
static1
Behavioral task
behavioral1
Sample
6fe07b97306d182ed84f9876bba1c79a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fe07b97306d182ed84f9876bba1c79a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fe07b97306d182ed84f9876bba1c79a_JaffaCakes118
-
Size
72KB
-
MD5
6fe07b97306d182ed84f9876bba1c79a
-
SHA1
4f66aa526cc210f6e9ccc9f2c8ae43a58bdf9f8b
-
SHA256
f9a41dc21eb81bb48b2ec252e862250663eb0d684d6f55e74308f912ff39ffe5
-
SHA512
b3d895e7766b7a264fddcc2db9848a0fd4744f92b57f131e35d552f70e46d22ff11b067cbaee798f58e2d3102f727224f47513e815b267ac73f64681202f565c
-
SSDEEP
768:MdMRZ8+bCWuIHN0uRpXB+c3tKRRZ2CoCAod4edWgP9uxlO+:Md4+oN1B+xzvoto+NZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe07b97306d182ed84f9876bba1c79a_JaffaCakes118
Files
-
6fe07b97306d182ed84f9876bba1c79a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r2rc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE