Static task
static1
Behavioral task
behavioral1
Sample
6fe6d4049a882039e87afe89773e8a8b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6fe6d4049a882039e87afe89773e8a8b_JaffaCakes118
-
Size
601KB
-
MD5
6fe6d4049a882039e87afe89773e8a8b
-
SHA1
c6193076a56f88a12f4fa5c9dd4027bd6d28e6ef
-
SHA256
55f6eec5aa87955b8cbd85a4aa0a0827f8c2f6517687842b6c2a293395cb1f8e
-
SHA512
c4e7b30e09d23749b14efcdde39b28109dc33f5682f287b19b778a228496407e990465895e55a209b08404b8298fd3389d75c3e1cc4742d1121a3e216fb3632c
-
SSDEEP
12288:oGok/MGnfel9KYs5u7INZEg0mG9TvJTs9lIjSCCRp05Uf/4zlRkhQEqnP:DLnfel9qpZ9GRvmlIsTP/MxvnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe6d4049a882039e87afe89773e8a8b_JaffaCakes118
Files
-
6fe6d4049a882039e87afe89773e8a8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 273KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE