Static task
static1
Behavioral task
behavioral1
Sample
0bdfe0831fcc8a5b4eb6908d6c65330e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0bdfe0831fcc8a5b4eb6908d6c65330e_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0bdfe0831fcc8a5b4eb6908d6c65330e_JaffaCakes118
-
Size
48.2MB
-
MD5
0bdfe0831fcc8a5b4eb6908d6c65330e
-
SHA1
b62b9b781a45e2e7420f6f32972dc31f3a918945
-
SHA256
4592d2341d319863c3c976d2d93276da9f0eb0e896aa7d528f4eee1a075fa97c
-
SHA512
97484aa82ed1223f39088e2c6735b969471620c31e5b0619764477c59b6a37d86eedf67be014c98bce7807ea69d68f40cfdd7f06d5c72128e75a6af0e610f802
-
SSDEEP
1572864:K8fErPSgRpI3DqcOuLe0qFA0fImfEcdvJ:vMSOIWjuq0qJfhfEuJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bdfe0831fcc8a5b4eb6908d6c65330e_JaffaCakes118
Files
-
0bdfe0831fcc8a5b4eb6908d6c65330e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ