Static task
static1
Behavioral task
behavioral1
Sample
0c0fe45b5eb4ceedc0a0a80f9114dd41_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0c0fe45b5eb4ceedc0a0a80f9114dd41_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0c0fe45b5eb4ceedc0a0a80f9114dd41_JaffaCakes118
-
Size
413KB
-
MD5
0c0fe45b5eb4ceedc0a0a80f9114dd41
-
SHA1
864dbf6807ce3bb756f7120e49580a5d253ab01b
-
SHA256
cfc4404708a73947cf214a3484b41580ebd5d9264bb0732ad74e1ae70348c141
-
SHA512
8a032141f566ea81006c75eeb72be486bba4140cfde04bfb5caf32de0cf7ebfaf4b02e582047c13cb700c426603f45aa8de53d52b7d50aa05bcd8139b7965206
-
SSDEEP
6144:MYUTSKe45+GWh9dTX2adDWw1Turojl9IFsANJLmfBrY:MFSr45mh9hrl4roZ9IaBrY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0fe45b5eb4ceedc0a0a80f9114dd41_JaffaCakes118
Files
-
0c0fe45b5eb4ceedc0a0a80f9114dd41_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ