Static task
static1
Behavioral task
behavioral1
Sample
06d9701c4bd6d5049445d3f76129148e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06d9701c4bd6d5049445d3f76129148e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06d9701c4bd6d5049445d3f76129148e_JaffaCakes118
-
Size
1.2MB
-
MD5
06d9701c4bd6d5049445d3f76129148e
-
SHA1
7e35fabd64416c2fe73bb9650bee3d77e05a8002
-
SHA256
e3a971358238766de1558044526d374df8afdad4cdce04d2ee222ff86bfe6348
-
SHA512
5ee607b735ee50b819db3ac3999776caf78c7e11dacc4c4752192d074b781c5ec22ef45a608b1222cac469330dbe0e2e0de393d72acb65a07d82bd8e6d5ecf70
-
SSDEEP
24576:BwcYx/Tn7Mc9h0tHB8BZfoUgTjozHi07XWKxBPED5MssEPpn6URIkdG2OW3uGFE9:BJYx1ZwozCwxBcgEB6UukdGg3uGK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d9701c4bd6d5049445d3f76129148e_JaffaCakes118
Files
-
06d9701c4bd6d5049445d3f76129148e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 526KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE