Static task
static1
Behavioral task
behavioral1
Sample
06572766604c9475550d0f92efc1e51d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06572766604c9475550d0f92efc1e51d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06572766604c9475550d0f92efc1e51d_JaffaCakes118
-
Size
255KB
-
MD5
06572766604c9475550d0f92efc1e51d
-
SHA1
f81f037278e0472fc3d83d1ac1da5492aa76d294
-
SHA256
0b6ec28853bd50b26bae6d2b28ef6ae839041fe390a9a3bde324c7e37c6c9246
-
SHA512
2c19a8ec7461fcb1af67c522c1d69946f77e8aa18babadd2423b62a902ba825c0c1da89f52a28cb408d7bf7aa76941dc87a693e222457d6bc5e69cf4284c1e0e
-
SSDEEP
6144:CIhWuevmv5dVGRlHnlnd+icDJhBZC+GisDCTRNQPAIGYXbDpU:CIhWueCdClHlnsDW/S02Yr2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06572766604c9475550d0f92efc1e51d_JaffaCakes118
Files
-
06572766604c9475550d0f92efc1e51d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
|(g0 Size: - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|(g1 Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|(g2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE