Static task
static1
Behavioral task
behavioral1
Sample
f6d26429130863dab8b4f205d325c102_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6d26429130863dab8b4f205d325c102_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f6d26429130863dab8b4f205d325c102_JaffaCakes118
-
Size
234KB
-
MD5
f6d26429130863dab8b4f205d325c102
-
SHA1
c1aa93b7b59db8487e0cb03ebb775b172acc9c18
-
SHA256
3189561a598b4070fded273aebe07ef1f60164c67151dd003b1a7d7234a8fc2f
-
SHA512
3e776bd7dc9c4f406de65ebfece606e24cc23991f2edc46fc14a6a1e67eae7998fe6775cde29b5b9905204c3e380051b5edb6de31cac245db1089dda19898c24
-
SSDEEP
6144:40AxWckDgBf8/7zby+t2bYIgjUPaGQCla8Eo/t:4L0ckDufizWA2MBjUxQCla8EoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d26429130863dab8b4f205d325c102_JaffaCakes118
Files
-
f6d26429130863dab8b4f205d325c102_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE