Static task
static1
Behavioral task
behavioral1
Sample
6fe40ff0c017b5af8d83987e126d0f51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fe40ff0c017b5af8d83987e126d0f51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fe40ff0c017b5af8d83987e126d0f51_JaffaCakes118
-
Size
57KB
-
MD5
6fe40ff0c017b5af8d83987e126d0f51
-
SHA1
282e5ee8b7501818872cff54284471c33da84982
-
SHA256
40e06143d9282db2e1173f32a1d3874ca2e88b7b33eacb9809c8daae43e6f1ac
-
SHA512
7b4c7513a34eab40bef157871766c2a6a3dbf7c79939429e669f97ba6cc46ac57719c3f4836e1e94708b9b70e25e0f86cd1e61f070a289efd73d39019ac610d6
-
SSDEEP
1536:jZbQp5uvQYh/21R594ywy+XBX/Rw7xy9aC:NbO52QYo1R3l+xPRWsv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe40ff0c017b5af8d83987e126d0f51_JaffaCakes118
Files
-
6fe40ff0c017b5af8d83987e126d0f51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE