Static task
static1
Behavioral task
behavioral1
Sample
06ad1c885913184f21a5226ccbcbf2d9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
06ad1c885913184f21a5226ccbcbf2d9_JaffaCakes118
-
Size
125KB
-
MD5
06ad1c885913184f21a5226ccbcbf2d9
-
SHA1
b7cad2a5fa77c66a9f8cbcdb66acbeb02a93bc61
-
SHA256
a80abc885bb34b3a63c1c31878c3ad21e78ee2237385622b029ed6d22cf499ae
-
SHA512
25a2f880f3939e4af4abd4e881064563971b22ea83c8191a3d443f2a9d61a9d94701cb8b526219d66a5f7f01b968afac1884003129f73862fd1d0ea6ce43b055
-
SSDEEP
3072:yLkFFhdq16Fr9ZndxN/29UV0y0h/nhfrsXW:8W986Fr9ZdmiSDhfhz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06ad1c885913184f21a5226ccbcbf2d9_JaffaCakes118
Files
-
06ad1c885913184f21a5226ccbcbf2d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 791B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ