Static task
static1
Behavioral task
behavioral1
Sample
0acd9e6e789cf68ffa7f9409037bb26b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0acd9e6e789cf68ffa7f9409037bb26b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0acd9e6e789cf68ffa7f9409037bb26b_JaffaCakes118
-
Size
711KB
-
MD5
0acd9e6e789cf68ffa7f9409037bb26b
-
SHA1
5425c77bfe86f54999debfc5e6df0e44d9c1b631
-
SHA256
8b9e7b2bb5ee2f28c7d040bceaa048d11562d7bc7a413e032b2afbae228dea8d
-
SHA512
0a4fb8c974123369f3cbad2e6a3d30ba1267eb5d21e6e0d2f26c6066855413330dc42c3228f19c25a2307b6f3a0b52ac1498e3ade93794fa79706782d1fa3d19
-
SSDEEP
12288:mJw/bZgZNzhQC1oqJgBwzdjA1oLxrF7IYLed9WEJrOmbAvw8lz/YMgE4s358:mW/uZl3tJgBgm12/7IY6X1JrOw8pxn3W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0acd9e6e789cf68ffa7f9409037bb26b_JaffaCakes118
Files
-
0acd9e6e789cf68ffa7f9409037bb26b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ