Static task
static1
Behavioral task
behavioral1
Sample
6feab4e0cfaacbdf0d1e0f5a754dff06_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6feab4e0cfaacbdf0d1e0f5a754dff06_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6feab4e0cfaacbdf0d1e0f5a754dff06_JaffaCakes118
-
Size
48KB
-
MD5
6feab4e0cfaacbdf0d1e0f5a754dff06
-
SHA1
db165cbb8463afd82d941651e259d5d60582dd74
-
SHA256
173c4c239a615590e351c2a40a63b06fa81f3ed28dc3205b73d676f703caf082
-
SHA512
fd2fa0f2ee4ff80e8216bcf4eac7e8fdb8f82e85a8850ff49b3ef628131e6e0005f7b7483e50e880116147f880251d73c7e2a26efbf4c83a4e9ebd6aa95f818a
-
SSDEEP
768:7a4V1KS0rWXgQmwm5NT5+v1vvu4lD0bNSD1TQ46hH9vth:5LKHrWXgQpm5+v5tDQ0QphH9vth
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6feab4e0cfaacbdf0d1e0f5a754dff06_JaffaCakes118
Files
-
6feab4e0cfaacbdf0d1e0f5a754dff06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE