Static task
static1
Behavioral task
behavioral1
Sample
06ba397e8befc9e46592dbd28e294819_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06ba397e8befc9e46592dbd28e294819_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06ba397e8befc9e46592dbd28e294819_JaffaCakes118
-
Size
17KB
-
MD5
06ba397e8befc9e46592dbd28e294819
-
SHA1
fb7c3a7cdcb58be94d34f3cb7659b7256053e734
-
SHA256
3b409bf11202761d359b52f23c231e538cd2fdd24ce4362096df6fe2b1e905ee
-
SHA512
03071ee2eb01ada08f2988a503a91f97a736469a143d7532a7adced9a708763fb5c77bfb6e39857cc52e426c3424dbb50b780e6634edaf683fb5d4ba641650fd
-
SSDEEP
384:uN+vQdMLazeFYvoineNE/G2a2C+zahg3VsGwNK9rkZGt8g3hCC:4uKMLaKWvoiK2x2CVKNKn8g5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06ba397e8befc9e46592dbd28e294819_JaffaCakes118
Files
-
06ba397e8befc9e46592dbd28e294819_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE