Static task
static1
Behavioral task
behavioral1
Sample
0ae12c2473e61b1e79bda8b1e2f827ae_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0ae12c2473e61b1e79bda8b1e2f827ae_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0ae12c2473e61b1e79bda8b1e2f827ae_JaffaCakes118
-
Size
17KB
-
MD5
0ae12c2473e61b1e79bda8b1e2f827ae
-
SHA1
3f8dd3939847259380c90bed686a1d317e47b949
-
SHA256
8f23931bafc7e1c30b05de5f1f27003cb16ef2e23e8bf80e929d713d7607f1ed
-
SHA512
55c5dd1223598e17757f1b0dfbbe06e7f12cf033b5685dba9c891feaf16e118e7c264c893626411b376c686fe0663cf3cb46e059d56e24b644eb1afca9a2f55a
-
SSDEEP
96:MQrtbwnvB4KJISPXIZgDiBTmorNCJBmbpHaz6FHcS0ev1z61r:MQBwnvBdf/IuDi1FZCJ0bpHhaS0evMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae12c2473e61b1e79bda8b1e2f827ae_JaffaCakes118
Files
-
0ae12c2473e61b1e79bda8b1e2f827ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE