Static task
static1
Behavioral task
behavioral1
Sample
6fe536bd655c8a8015621b90cf58d9a0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fe536bd655c8a8015621b90cf58d9a0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fe536bd655c8a8015621b90cf58d9a0_JaffaCakes118
-
Size
6.9MB
-
MD5
6fe536bd655c8a8015621b90cf58d9a0
-
SHA1
757238404b3617a9df0e078b3e6ad1a8798e8282
-
SHA256
27b06c9ec11a9d39405c68ea37bbb4faf57e4ec9367e47088c3e10d1209cf459
-
SHA512
b2bc960ac2643d65d275623449b5df976950f92f679abfa921f6bb87f242c94257d03fdab6ed717373c7fae64e44c760de2d859c4137393cdb6dc18ee37150ce
-
SSDEEP
98304:/96jn9PqpL9O4vf/snZYTKuIhASyzV4ogYdYwbLQ/60jU2kJBRnOYOPCAitwspAy:kQLfANuIvymgNKU2g3nOYWCAitws5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe536bd655c8a8015621b90cf58d9a0_JaffaCakes118
Files
-
6fe536bd655c8a8015621b90cf58d9a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE