Static task
static1
Behavioral task
behavioral1
Sample
c06449aec757e6eea6a8a06876f961c6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c06449aec757e6eea6a8a06876f961c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c06449aec757e6eea6a8a06876f961c6_JaffaCakes118
-
Size
1.6MB
-
MD5
c06449aec757e6eea6a8a06876f961c6
-
SHA1
2e10f6474f1d0ac9b6cc7a67db3cf9fdb011f090
-
SHA256
1c2e8fe849f3973b6f8420d0ece01c446e2a1faddb2ed598accc94a4584c523e
-
SHA512
0f3f44ca1351d6d9733aa02df68158ef1981787f34f7df3f4428c2bf51f4d03da2fcfb98139fd58fb58869c8d04b404ea748507374b24c943b6a345bdbd1f525
-
SSDEEP
24576:1kCw+Dq7VrrIZnRJnSESKj4IR7sJdwtqN6HfrMxGvJ1YtOIqQ1w/1V0Y0SNdeIzY:1kvXFzIfY1w/MkeIzy5ByGe104bSdkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c06449aec757e6eea6a8a06876f961c6_JaffaCakes118
Files
-
c06449aec757e6eea6a8a06876f961c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wade Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE