Static task
static1
Behavioral task
behavioral1
Sample
01f2a08cc59d69da8813e174e9e00a49_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01f2a08cc59d69da8813e174e9e00a49_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
01f2a08cc59d69da8813e174e9e00a49_JaffaCakes118
-
Size
9.0MB
-
MD5
01f2a08cc59d69da8813e174e9e00a49
-
SHA1
3bbb4f9c187d6bf4d5a11665f37c78f8538f9370
-
SHA256
912ba0796559be4ccdbcc341a2af05512a21ad12748f11c623cd7c8534aef69d
-
SHA512
67c96ed15e6e5e50cc310b42d0aeba0983e0bbec6acefbb65de21436a02a867af2c24e28f4f41483c94a5f09278db5e524ea74681c0facf902b2d4a095296546
-
SSDEEP
768:t9ZEg1+Ls+cAXJpB2TgpZnjJHc47EZEygj95SWMpbViFq4/4M9nws9g:t9zrAX5NjJHhE2ygDLMpZcq4/4M9nC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01f2a08cc59d69da8813e174e9e00a49_JaffaCakes118
Files
-
01f2a08cc59d69da8813e174e9e00a49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zCOudfzz Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
waecTbTU Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WISE Size: 242KB - Virtual size: 1.5MB