Static task
static1
Behavioral task
behavioral1
Sample
c6f1e2e6e6722fdf1c2c38d9606cff76_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c6f1e2e6e6722fdf1c2c38d9606cff76_JaffaCakes118
-
Size
310KB
-
MD5
c6f1e2e6e6722fdf1c2c38d9606cff76
-
SHA1
851fe453c1a9bd9710282b980e96398bbbb3559c
-
SHA256
8a788d3f50ef466da2d1160b85543fc7048f438de1c8057de3b4d33814cbd0dd
-
SHA512
d8119d897d960ac0bfc34da04bea7e63767cb86713aa06f5025a7c0bfdb2b2979323e945f42da008c378d98a2577384c44fa2d63ef37bece6b84f9a19cb445df
-
SSDEEP
6144:n4sJ2Rb2e/RZ+rF9XLLiPQDzCTFQEHnsIl+BgSwadsJxA0kTIHJNbrHoYB9+s5:4lRbd/RZ+rD/aJsngBad6xPsIXkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c6f1e2e6e6722fdf1c2c38d9606cff76_JaffaCakes118
Files
-
c6f1e2e6e6722fdf1c2c38d9606cff76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE