Static task
static1
Behavioral task
behavioral1
Sample
0d9d37e221692ae02e2f454964aba1bb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d9d37e221692ae02e2f454964aba1bb_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
0d9d37e221692ae02e2f454964aba1bb_JaffaCakes118
-
Size
420KB
-
MD5
0d9d37e221692ae02e2f454964aba1bb
-
SHA1
4d2d5b419fabb95df03df950ece1b6df3bf8716e
-
SHA256
38983b9091f2b8c63edd926eb2830b2267647abe77e2f72a0cbe571341cd6dbd
-
SHA512
9222db2a1d727ac3b568f880f94dfbd88a1609bdf649b3c9eecfba4249b36462d3a0a4bb83985dc3fe97323e644d1305d998927cd0ac849983620b1fd8cb5d74
-
SSDEEP
6144:yi7o7VlOUnB51DXOv47FzoSXi7o7VJaOUnB51DXOv47FzoS:To7DbBfrxzoSKo7XabBfrxzoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9d37e221692ae02e2f454964aba1bb_JaffaCakes118
Files
-
0d9d37e221692ae02e2f454964aba1bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.dqg Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gzj Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE