Static task
static1
Behavioral task
behavioral1
Sample
06fe06646a75ed4d3883bba34417848d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
06fe06646a75ed4d3883bba34417848d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06fe06646a75ed4d3883bba34417848d_JaffaCakes118
-
Size
29KB
-
MD5
06fe06646a75ed4d3883bba34417848d
-
SHA1
401628946f4665500952ec66beedb57abe3f8acd
-
SHA256
9730184cba857d22335d77e4acba58c52e6914ee2ae00988ccd73f463987a4d0
-
SHA512
7c1c5386527524984e286a48aab6579d068f70d00895cbbd1c88f308d8001ef132dbbdb0ee87a73a0cffc868f97d035a0ee9df06419a2dc72e16db9a2fc13f68
-
SSDEEP
384:0Yp91YiB3zu69eQHxKX6ufIy2rKS0ml1vEtA0F5qEndl1mcD:0U17u64QRi6ufITymDUA+5qUdmE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06fe06646a75ed4d3883bba34417848d_JaffaCakes118
Files
-
06fe06646a75ed4d3883bba34417848d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ