Static task
static1
Behavioral task
behavioral1
Sample
06eea31e4de0610de22654cc96573992_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
06eea31e4de0610de22654cc96573992_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06eea31e4de0610de22654cc96573992_JaffaCakes118
-
Size
10KB
-
MD5
06eea31e4de0610de22654cc96573992
-
SHA1
dc65a40828b23230b91348355ecc3a917a0fe152
-
SHA256
e4b9ac94c611368308d54f2b4e09981abf7df1b317baff58ab4f0aa6e4cbea51
-
SHA512
fecbc6b90db4b89fc10aa3c4de2e1e195567c7c793f0d446c635e0db397a7907141bbffc4a683a7682db769c227e40171a5d6b0b0330e846716f635a810c6968
-
SSDEEP
192:nbiqIXsP18touF3lcfFf5yqGdHLSX9eAW:biqis9Qlcffyq+eRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06eea31e4de0610de22654cc96573992_JaffaCakes118
Files
-
06eea31e4de0610de22654cc96573992_JaffaCakes118.exe windows:1 windows x86 arch:x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE