Static task
static1
Behavioral task
behavioral1
Sample
0ab59027a253716e8165dd750065705b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ab59027a253716e8165dd750065705b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0ab59027a253716e8165dd750065705b_JaffaCakes118
-
Size
1.3MB
-
MD5
0ab59027a253716e8165dd750065705b
-
SHA1
78e8411c69a319220525763720f123b2f2b83581
-
SHA256
ac5e04ca88347eb7f3d879ead65300877f7ba4500d40b79cd6e180e0deaa3455
-
SHA512
501d21b450ec5e4bd09ae685a8b8138e45adacb9e46b52b5de8fe3a942c2d0c5b89edab84bb2dc11d6ab212f4d0a216ef7ad8e5d0ca3f14596a6f7ddf9911472
-
SSDEEP
24576:Ut15YVmszOe4gn9FIifqFuzMPETt15YVmszOe4gn9FIifqFuzMPEQ:URYV9zOe4g3qFURYV9zOe4g3qFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab59027a253716e8165dd750065705b_JaffaCakes118
Files
-
0ab59027a253716e8165dd750065705b_JaffaCakes118.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ