Static task
static1
Behavioral task
behavioral1
Sample
b6f2465407e2a4de83d6edf23cbf2ebb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6f2465407e2a4de83d6edf23cbf2ebb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6f2465407e2a4de83d6edf23cbf2ebb_JaffaCakes118
-
Size
232KB
-
MD5
b6f2465407e2a4de83d6edf23cbf2ebb
-
SHA1
6817e8de5400dd42be705f2786398b53ca84821f
-
SHA256
77a84c1c163f315ec240b32b71fdb51dda20bc248d844cb9cd1e5c8e607f82b6
-
SHA512
e193213045da2fd74df2f6988329485a9f3b1bc91bcf26e8ebd469179fd59619b8d3437aaf3e5a207fa84726f4ea7e4dd38681c0825b90ce3d1c23825985f7d7
-
SSDEEP
3072:XyPFUyQdfkNJqP1JN9eEQbWzCbGnYITt6KIefwbNYkGM752DEDNqfMOR:id8wIP1nA4XY752DEDNq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6f2465407e2a4de83d6edf23cbf2ebb_JaffaCakes118
Files
-
b6f2465407e2a4de83d6edf23cbf2ebb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE