Static task
static1
Behavioral task
behavioral1
Sample
06dc3c42b8a3dbc3229c9c2a27fe62ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06dc3c42b8a3dbc3229c9c2a27fe62ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06dc3c42b8a3dbc3229c9c2a27fe62ad_JaffaCakes118
-
Size
491KB
-
MD5
06dc3c42b8a3dbc3229c9c2a27fe62ad
-
SHA1
c389a434185ef7b1e692bc589ccb193306148675
-
SHA256
63bf8d05bcbbd6755176268bd56029fbc4f2ca130075721c8de7347953090437
-
SHA512
d99c66999bc6260ddc2837e14a11c41f0d337bdc57408897c230db3ca814d38b66dc5b36ea6abe555ee2e38060a8bbbfbc31b93883396113bc2f6936158c6f44
-
SSDEEP
6144:tCUTfdF1BF2idZecnl20lHRxp3gVncduD7yB9VCO6Sco4q8+dE6Cq3eMJKP6T8Nx:tbDhF3Z4mxxuDqVTVOCOM2G8Y2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06dc3c42b8a3dbc3229c9c2a27fe62ad_JaffaCakes118
Files
-
06dc3c42b8a3dbc3229c9c2a27fe62ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 67KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE