Static task
static1
Behavioral task
behavioral1
Sample
0b83c85c45995b2724e7e6a6752f01ff_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0b83c85c45995b2724e7e6a6752f01ff_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0b83c85c45995b2724e7e6a6752f01ff_JaffaCakes118
-
Size
208KB
-
MD5
0b83c85c45995b2724e7e6a6752f01ff
-
SHA1
2f22d1f6ab8a04f811d59f552c04d1f23e303cc7
-
SHA256
436f15dd76ffb6c58015af1fd0e6fbeba57656028a585e10e5ddb803eb97240d
-
SHA512
1aaf99f4dd8b74e10f54a07bc308da079898b89cd4bbe40c1aa85bfff3274c8f0a52f6e1eeaa905549ceab4eeb4a293e2766626e4feb8377edceda36923e6a23
-
SSDEEP
3072:EVMHmu8MBpiTEAQ5bW7dQ74t4O8deqGWp3ASklovCIlwnG:EVMHjd5bodQS83FpsWnlwG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b83c85c45995b2724e7e6a6752f01ff_JaffaCakes118
Files
-
0b83c85c45995b2724e7e6a6752f01ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ