Static task
static1
Behavioral task
behavioral1
Sample
c06a01518b66197ee9a9e25c2a81aa5c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c06a01518b66197ee9a9e25c2a81aa5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c06a01518b66197ee9a9e25c2a81aa5c_JaffaCakes118
-
Size
12KB
-
MD5
c06a01518b66197ee9a9e25c2a81aa5c
-
SHA1
24aec53d4a08196a19ed66b4958731fbd8113984
-
SHA256
bd57ec29b7e06a091f940efb27d2f0fa7d2298fdae4f2f458f17d59b3aa03bde
-
SHA512
dab538e6be45616296a65480e583298913be121ee96ff809bf3edd021ce6b257f0decfc800a708dbf03ee4c704caea207b2d67feb2f2926ca83a4b9dfbe58da5
-
SSDEEP
384:ig8vXn1OiA0zC4wi6pupjG3yUvUUITMLNCMz1745/:i/h7zsp2FUITMLNf174F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c06a01518b66197ee9a9e25c2a81aa5c_JaffaCakes118
Files
-
c06a01518b66197ee9a9e25c2a81aa5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ