Static task
static1
Behavioral task
behavioral1
Sample
b6001f3b5d5ad965599d6c7d2bfe3f47_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6001f3b5d5ad965599d6c7d2bfe3f47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6001f3b5d5ad965599d6c7d2bfe3f47_JaffaCakes118
-
Size
125KB
-
MD5
b6001f3b5d5ad965599d6c7d2bfe3f47
-
SHA1
c07b6545a6e3f00cfdea84a5fbb66851873dee2f
-
SHA256
e4bab3fe6bc2ed6b667d16adf974bf2daef1924a4ccc02b697f14174994eb380
-
SHA512
7d3165abbffe173bded9ff4a8ad56e74e1b7e1552e28f579d315aee313d75c71a55e4bfe300f9b76cb8b495020c54d045cb26f6302c74d66e4f2111edfa707c6
-
SSDEEP
3072:Q7m44COEA95BoDT+OGyZfyC8HwakVBMy9SbxCqYPox:uOp5gT+IxawPMy9SbQqYG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6001f3b5d5ad965599d6c7d2bfe3f47_JaffaCakes118
Files
-
b6001f3b5d5ad965599d6c7d2bfe3f47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE