Static task
static1
Behavioral task
behavioral1
Sample
b6dd8901fbd463ea45e07c80f2ad2c00_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6dd8901fbd463ea45e07c80f2ad2c00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6dd8901fbd463ea45e07c80f2ad2c00_JaffaCakes118
-
Size
307KB
-
MD5
b6dd8901fbd463ea45e07c80f2ad2c00
-
SHA1
411f1b22de67de7a68d52a6b3e2971b9929464a5
-
SHA256
d022f56ca3210b4c829648532e7e7d4a3f019e66be36520742a9cf64267df923
-
SHA512
2d0ee7c22c277c79a007f1af0faa592daee6cf582008d25cd342509f2e1e8af73570f63b76f508dd2def324abfcdbb79c6d530955097b3a8fcc0b1bcedbe877e
-
SSDEEP
3072:BFkxZpc6P5XNZ9Ca29e3cDTwqLwEYRtKg7VaBNP92sHuxjoT:BFMZpz5We3cD82YHXoZ9FHz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6dd8901fbd463ea45e07c80f2ad2c00_JaffaCakes118
Files
-
b6dd8901fbd463ea45e07c80f2ad2c00_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE