Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d7b84a293ccd1347fc8e3b7f4fb1863.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6d7b84a293ccd1347fc8e3b7f4fb1863.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6d7b84a293ccd1347fc8e3b7f4fb1863
-
Size
756KB
-
MD5
6d7b84a293ccd1347fc8e3b7f4fb1863
-
SHA1
27f801dad427981761f766189fcca4f066c21960
-
SHA256
0c7701d23e4d749e8d92ed36d458a1a41f92947db723bb244a80315df42ee8dd
-
SHA512
40d0ef6052d3858ad37fd2b1d73f35d50ebcfc0d788a3968b6bb568691d18c4472a21b169e607dac50a0070276a747a56ed4d67829a014b4bd256e7fa9565d2f
-
SSDEEP
12288:n2g6yD4jcNXJV22cm7P6peq+bj3BamVwSCbCvY2cMnJLGVDuomyjlQ/1bmlN01XW:t0kXJVJcm7SpN+3mpbKc2FGVDKTpmkP9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d7b84a293ccd1347fc8e3b7f4fb1863
Files
-
JaffaCakes118_6d7b84a293ccd1347fc8e3b7f4fb1863.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ