Static task
static1
Behavioral task
behavioral1
Sample
0b3b2ae33613c2e5b26cf93bfc6c4f04_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b3b2ae33613c2e5b26cf93bfc6c4f04_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0b3b2ae33613c2e5b26cf93bfc6c4f04_JaffaCakes118
-
Size
494KB
-
MD5
0b3b2ae33613c2e5b26cf93bfc6c4f04
-
SHA1
0167bf73f4ab5db487f481a57398e0835d65a9ad
-
SHA256
cbf7d829879a8053497817120c5e27dff3ff16b4e79b88f9fbd257abb7cd0b2a
-
SHA512
a60a548ce3d66e48c13ac1a902bb5cd1d5ec80bfc5a00271272d8025d6e3e2ec3b90d2840cb17c3a499fa84fb3b86b6973bfb864e78a27cb26eef2b8d37d54a2
-
SSDEEP
6144:99lDrlnG72hBNP6twET8UAcJsZhzH5QX33hnRXzr44YrVeCXMxu8+yFUW/:9jXRG6hr6eS8vZehnRXzr4f0sMSy60
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3b2ae33613c2e5b26cf93bfc6c4f04_JaffaCakes118
Files
-
0b3b2ae33613c2e5b26cf93bfc6c4f04_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ