Static task
static1
Behavioral task
behavioral1
Sample
06de7d8d5086a86e97abc2d2f44ecaa4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06de7d8d5086a86e97abc2d2f44ecaa4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06de7d8d5086a86e97abc2d2f44ecaa4_JaffaCakes118
-
Size
41KB
-
MD5
06de7d8d5086a86e97abc2d2f44ecaa4
-
SHA1
36a487735ea1818684920b7d8bd56bd38201dccd
-
SHA256
11c26f2a50bd4cf30c8842ac51fc21b0c17ac67e9f946c159e3e9d00fb906a05
-
SHA512
a54e57da677922e5d3ded11390894e1798304f9f1674cb15fd10dc7226238554d26b6df3a4d4e313413d65faf75eb0a4f313e89937cebac10c07632a3e3048c2
-
SSDEEP
768:UZz+HtcvioXc/mv0eC2G/Nk+Kgq/nY/XpIO5cATAMFwJVthV:UB+HtcvioGS0eslsAULBTrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06de7d8d5086a86e97abc2d2f44ecaa4_JaffaCakes118
Files
-
06de7d8d5086a86e97abc2d2f44ecaa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
� 'w0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� 'w1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� 'w2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ