Static task
static1
Behavioral task
behavioral1
Sample
606e0669b841b8b97fb6554450e1bf28_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
606e0669b841b8b97fb6554450e1bf28_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
606e0669b841b8b97fb6554450e1bf28_JaffaCakes118
-
Size
805KB
-
MD5
606e0669b841b8b97fb6554450e1bf28
-
SHA1
6a7c2f94fd46973a160a7bb922abb3a85ea7d339
-
SHA256
04fa29d4d7cfdd034b31405f04a7c404e50085b07628796a156079d514dfdcfd
-
SHA512
15563ec1bfa74920836d9cd69c1f0c6605bd036ca28db284d21dc4ed2c16938af7efe81cfd89a90d17eb3617554043b70c5ab02ec4df41ec0807070aa30b0cd6
-
SSDEEP
12288:yie6c936VP368t20wPyEH8qpiI8wL6HoQXQeLqHM6kFpICr0p8:y/6c16J6827LHVpi4L6HoQRXr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606e0669b841b8b97fb6554450e1bf28_JaffaCakes118
Files
-
606e0669b841b8b97fb6554450e1bf28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 1KB - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.map Size: - Virtual size: 680.0MB
.info Size: - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 523KB - Virtual size: 524KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE