Static task
static1
Behavioral task
behavioral1
Sample
d6106c3c902966ff35423bbfdd1d1702_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6106c3c902966ff35423bbfdd1d1702_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6106c3c902966ff35423bbfdd1d1702_JaffaCakes118
-
Size
171KB
-
MD5
d6106c3c902966ff35423bbfdd1d1702
-
SHA1
7c402d785219d5a9779d914444a1f7ff9fcaf6f7
-
SHA256
147be4ac560b3583eb0ada737ce676bfdaff6ef550ac573ccbdb0d4821e46ee5
-
SHA512
d9aca1096aebddd8a6e5d5f5f94131b456e0ef65de4ef6e74c327758387da8283517a44902e0cbbf69a25116ac86b7a6358e3733d9ec2d9a96790e57d9ef3d1f
-
SSDEEP
3072:b6/tC51ejlIpw2Mi4/eR4uYcucFQL4A5ewRp+G92RIeYPLRc0IhoIZJW+UyX2EMS:b6lCqjGpzOuMcFi4AIwjRv/PLhl2L3X0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6106c3c902966ff35423bbfdd1d1702_JaffaCakes118
Files
-
d6106c3c902966ff35423bbfdd1d1702_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.iNV Size: 152B - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE