Static task
static1
Behavioral task
behavioral1
Sample
a6c87160b6e28b8fd3ba30285effba36_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6c87160b6e28b8fd3ba30285effba36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6c87160b6e28b8fd3ba30285effba36_JaffaCakes118
-
Size
70KB
-
MD5
a6c87160b6e28b8fd3ba30285effba36
-
SHA1
70f65175e0a6e12392197b553720b0ac4728c01e
-
SHA256
a2614cda238cae900a1aa8316c6fea7d131864824f3a5aee63156cfb854f5896
-
SHA512
e38db42a627b959acb98364c0766334df248a04d60643aa67f4e4950f462541e8bd7fb33a31c129f52d0bd34002b7b9a7fae3aa01a3dbdd63f89e78f015af5b3
-
SSDEEP
768:wK39uRJ1l2JA5uBsyACXeRfgZYPKXbe+zIXX+jiFUhUDERWMP0t6LOYZuoXyh:wK39uRJ18JA5ssyACkfg9bAFOIv6lB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c87160b6e28b8fd3ba30285effba36_JaffaCakes118
Files
-
a6c87160b6e28b8fd3ba30285effba36_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE