Static task
static1
Behavioral task
behavioral1
Sample
f0c6c3b1596ea939c10d0a6350d94b10_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f0c6c3b1596ea939c10d0a6350d94b10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0c6c3b1596ea939c10d0a6350d94b10_JaffaCakes118
-
Size
98KB
-
MD5
f0c6c3b1596ea939c10d0a6350d94b10
-
SHA1
c4b8d0a427a763ea24180e1a2d98a0604016ced3
-
SHA256
e14e8d58d951cc11bf9aa402316554afd3e8b695ed7d05626b5faad2a95f17f4
-
SHA512
fa963d562f365d48550e70c71922ad9db90f19450f62785f7e10e10393c8cbd65629698b3fcb944a639f8a24fcc453d321efe3201a9f262d5e777453f74a9ed8
-
SSDEEP
1536:bt4QPQ87FJzjEOX6XUwUurFPno1S23+UgZCzI2rsVn8TRM015:h4QPlJzYOXI1UurFPnyBOtZwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c6c3b1596ea939c10d0a6350d94b10_JaffaCakes118
Files
-
f0c6c3b1596ea939c10d0a6350d94b10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
sz9qk8p Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uu Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE