Static task
static1
Behavioral task
behavioral1
Sample
b6c9b76cd6cbb35f950d15b371cf3b64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6c9b76cd6cbb35f950d15b371cf3b64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6c9b76cd6cbb35f950d15b371cf3b64_JaffaCakes118
-
Size
356KB
-
MD5
b6c9b76cd6cbb35f950d15b371cf3b64
-
SHA1
dfb134b3f9637b1c0a5d03381e4ae25f82edfeb5
-
SHA256
2e34e756eea78f595cbee37fcd5cc6267e8f18d95635ce91b310f8f50d47e395
-
SHA512
43f6a791304647226212067b166de19e0cb91cfe192fdd34e0da3d3b2cb12dc743606c79098c23828c6f2a4e023211b8f117f4e5bac90770c0bc2525193c42d3
-
SSDEEP
6144:tw9hGxwisu1mqq3p9EAQC0gyz0ZYGLM2bF3I5sKvqDKWolACckaIXXnOU67+c76S:t/5cqIvKCTNxbl8sEqDokSOQc769k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6c9b76cd6cbb35f950d15b371cf3b64_JaffaCakes118
Files
-
b6c9b76cd6cbb35f950d15b371cf3b64_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 251KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE