Static task
static1
Behavioral task
behavioral1
Sample
0cef3efb5efc0bb905a72a4312a725fd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cef3efb5efc0bb905a72a4312a725fd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0cef3efb5efc0bb905a72a4312a725fd_JaffaCakes118
-
Size
192KB
-
MD5
0cef3efb5efc0bb905a72a4312a725fd
-
SHA1
f41ddf2d85b0d50f0068b7543e303d1523bad7d5
-
SHA256
768826fa4fff991467ab691afdf74d542c4d7ef60d0256cc2961e40f52c876d2
-
SHA512
9def40d6f08b828c5b9134f4888ad38b91797570dfcb21b657bcb031834726f175b14105e0e062b50ea6e21113c7bcfc8e9c0704560597b273169e45dcc7ced9
-
SSDEEP
3072:yCh7oPayktwQnOjK8dMFsJOLfhUuMyefPityJxE/15lHtpFx:yCBoYuQnF8CFsJXK0Bk5lHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cef3efb5efc0bb905a72a4312a725fd_JaffaCakes118
Files
-
0cef3efb5efc0bb905a72a4312a725fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ