Static task
static1
Behavioral task
behavioral1
Sample
06bbcfcb0a74c6aac22e523239c708eb_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
06bbcfcb0a74c6aac22e523239c708eb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
06bbcfcb0a74c6aac22e523239c708eb_JaffaCakes118
-
Size
1.5MB
-
MD5
06bbcfcb0a74c6aac22e523239c708eb
-
SHA1
50eb47a13f6b5f108bf03077474f2bda4ef6f6e7
-
SHA256
b0f01d82dcd4844c54bfd6b9d01f9f61e7e34230fe63a87827175e59f5d9e84a
-
SHA512
b4d9b02f1e3af64672e7442db1ef7f4fb0bf727bbfcb4e35ca5c59075fa0d41251b964afdaad69cf0dfd3e6db80d89b3d5c2c0d47ee92e9dae79abb70f6e52e2
-
SSDEEP
24576:smIPAxjEHzzLIqt4zYseH/LkolCHmmlcmNx44KHVY:egETnRC4AokGqcmH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06bbcfcb0a74c6aac22e523239c708eb_JaffaCakes118
Files
-
06bbcfcb0a74c6aac22e523239c708eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: 61KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE