Static task
static1
Behavioral task
behavioral1
Sample
6fe967d3ddf1d7e0ae2d86cd793d10e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fe967d3ddf1d7e0ae2d86cd793d10e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fe967d3ddf1d7e0ae2d86cd793d10e5_JaffaCakes118
-
Size
634KB
-
MD5
6fe967d3ddf1d7e0ae2d86cd793d10e5
-
SHA1
c145e9fc19e2422384adf86f13bd0ffc43168e41
-
SHA256
18a0f8216d7b034cf320c447b0d220cd1bf83930436593b79f96ed430e10f627
-
SHA512
4391b8060f92630009cf96ea5c76f0b71da32226bcdfd3d7a3a7bb46e02f8a65529b52746acf3401c9195b61f5aa7ec25ab4e3b238af64e8555bc9e8b0f5be34
-
SSDEEP
12288:5Ya9CadV3DzXtnCRGFPRKem1h10/S7QdLRLI3ZO4G1RMow0z:5YW5nCRaLa9chRLIJHbow0z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe967d3ddf1d7e0ae2d86cd793d10e5_JaffaCakes118
Files
-
6fe967d3ddf1d7e0ae2d86cd793d10e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ziyue! Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 634KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE