Static task
static1
Behavioral task
behavioral1
Sample
606edfddbb659825238031cc16383e6b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
606edfddbb659825238031cc16383e6b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
606edfddbb659825238031cc16383e6b_JaffaCakes118
-
Size
141KB
-
MD5
606edfddbb659825238031cc16383e6b
-
SHA1
c5c22f3f9a1c978198a85b95427a1bc4033733ba
-
SHA256
8a746dc87be600b7390a8b0290a374a5c31219096e8f048d199c1564358a9513
-
SHA512
cf6f28a00ccc6f412e37d530d37e14fc41e7a78296c0fc9bfbb3ae2bfc424eb8b0f164ab7409b26e16d24f5eacd9a7ab5ddf0599629148902022d91960a8bf78
-
SSDEEP
1536:mbHJhwdPt8oH0wjjO9VYCzF2YG6rB0g7uKAc9jHgGemafUXcypl4161Rgk4o4BGu:wphwdPtrHdjaF2YG6S3K5edf9UOMT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606edfddbb659825238031cc16383e6b_JaffaCakes118
Files
-
606edfddbb659825238031cc16383e6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE