Static task
static1
Behavioral task
behavioral1
Sample
06046455d877ba8d26ec80fee3d7190a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06046455d877ba8d26ec80fee3d7190a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06046455d877ba8d26ec80fee3d7190a_JaffaCakes118
-
Size
140KB
-
MD5
06046455d877ba8d26ec80fee3d7190a
-
SHA1
1c6b68ded8e77c89261f48882b10283a10b33cc4
-
SHA256
a07b06e4e5e3d62d66fb71c2a76feb91cc36dca4bc11b742466b1eb07690b285
-
SHA512
b892c03c3f0f0df07d70682f55474d8475650dbb473e49e966a5dda55cb2359685212e844750ca062d72fa4abdba9bbc6a83dcc8470b34dcfd5e101d5eca63e9
-
SSDEEP
3072:eypQFai2iI3FYEZg+4PxLWiFKBerp7DVG9EgyQH3rTsofAL:eymEiTq1XU6WKgrp+EJi7QooL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06046455d877ba8d26ec80fee3d7190a_JaffaCakes118
Files
-
06046455d877ba8d26ec80fee3d7190a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wxzy1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE