Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6406508dd1a356c55c6cd0ee11d7b850.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6406508dd1a356c55c6cd0ee11d7b850.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6406508dd1a356c55c6cd0ee11d7b850
-
Size
263KB
-
MD5
6406508dd1a356c55c6cd0ee11d7b850
-
SHA1
3e22a13f956580132356da7fe3a34244ad50d51c
-
SHA256
23e4591f4c3ee0f420d57d765dee75477500acb7b299610ebe7f30335e142fba
-
SHA512
c7fb881cbb3916c218272a79152b2c033ee553f68a4aa6e31cd19ecb382e82c60c9441238ca435d1ce7d3c80ec07e11040a440a6392d58fc331a7a818bffbf94
-
SSDEEP
6144:xKcU7oQvrYYmb8d5pOqAgi192SFzkz/dH4SUtj6khsA3gK:xK37o6rY9eYqAD19XFQzFHItj6khv3gK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6406508dd1a356c55c6cd0ee11d7b850
Files
-
JaffaCakes118_6406508dd1a356c55c6cd0ee11d7b850.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.texts Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idatab Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE