Static task
static1
Behavioral task
behavioral1
Sample
607d2f55819cbd002a2149244f8aef69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
607d2f55819cbd002a2149244f8aef69_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
607d2f55819cbd002a2149244f8aef69_JaffaCakes118
-
Size
156KB
-
MD5
607d2f55819cbd002a2149244f8aef69
-
SHA1
f3bf9edc524e2fa7720d3c2a702456ca19539af7
-
SHA256
0e6d409969f97a25bce0fe766b4d2d2426a5c5824740806aadede303676f379d
-
SHA512
06a37432cc5bbfd36b932428b4c8e93b2d4a2f64bbf97a89a69c7f13a27bd6cb3016fc4ae98c938ed2b76fd374e722a07a4b67d1e6bea08af25ef3c7cd09333e
-
SSDEEP
3072:rIE02r9D+tzgRK6gd5MCzdqLAKDNNxj3ZNNNNVBWhPz:rNr9D5RK758xj3fBWh7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 607d2f55819cbd002a2149244f8aef69_JaffaCakes118
Files
-
607d2f55819cbd002a2149244f8aef69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��:~� Size: 1B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
��:~� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE