Static task
static1
Behavioral task
behavioral1
Sample
6ff80939059df33a0f658b3e9b9d1d3b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ff80939059df33a0f658b3e9b9d1d3b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ff80939059df33a0f658b3e9b9d1d3b_JaffaCakes118
-
Size
103KB
-
MD5
6ff80939059df33a0f658b3e9b9d1d3b
-
SHA1
7161ce4a8abbc5cd39470808032259e8783d486f
-
SHA256
3395e5f2c090e89a4201af92c6d1d4f6804bbe7e62f51325d3cd9afae34a1318
-
SHA512
665934c3ee0893f93aa757317605715614ff7176f42c51c820df0102218efe4608f653d4492df914c713f2750345b0f3e1e35dd4693bc1057a6706f4c5eaf67a
-
SSDEEP
1536:p+EIOVawp8nxiVLeAWZdj3ajyGpp21ugUr9uTYhcVpehnYtlkM65Irif+1P++iTb:pDdc2V83j3ZTRGeehal28A+x+l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff80939059df33a0f658b3e9b9d1d3b_JaffaCakes118
Files
-
6ff80939059df33a0f658b3e9b9d1d3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE