Static task
static1
Behavioral task
behavioral1
Sample
606ce163ee4161e2c8fa260c7da5eb49_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
606ce163ee4161e2c8fa260c7da5eb49_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
606ce163ee4161e2c8fa260c7da5eb49_JaffaCakes118
-
Size
82KB
-
MD5
606ce163ee4161e2c8fa260c7da5eb49
-
SHA1
fe056875c844094cbce6c0a20f37e09c7a607df6
-
SHA256
980475c27d59400e01e3890056646f4f3bdc2f2cbc14bab1c56f4323db70be79
-
SHA512
45c58f39aa31070d724581e559b0e3c4fe35438e8d99c5a0284bc76b8c5575222b05e81355bfcf5fca7902a9682a7384fe8f062d918f0d3147f0ccc15e39ce7d
-
SSDEEP
1536:wgh5p9XCWBZKTECkno09+a3H73OgFJyzI4RTs8l:rlXCHTECkno0UEzOgFIzI4ps8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606ce163ee4161e2c8fa260c7da5eb49_JaffaCakes118
Files
-
606ce163ee4161e2c8fa260c7da5eb49_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ