Static task
static1
Behavioral task
behavioral1
Sample
0c31265eaee76f0ffb42eecee6c5bfc9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c31265eaee76f0ffb42eecee6c5bfc9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0c31265eaee76f0ffb42eecee6c5bfc9_JaffaCakes118
-
Size
820KB
-
MD5
0c31265eaee76f0ffb42eecee6c5bfc9
-
SHA1
86a9772d8df48fd557ab160c8db9c90dafd63bdb
-
SHA256
137edb02ce55959594c45ba2f6ca65a864cffc064dda426bde8b61e1b031c96f
-
SHA512
a53ee7454fd171a1989b604fd959be3dd751482b0d1a18ef37a65c27cf7efe793f8892f87279cd68439d1978bb22ef99ef6aa996cc580c36286af7446db5f7b9
-
SSDEEP
12288:smqslOszIpAK4UmyX9JtH97iAXxkjPv4+M8YZ74Eg7:smIPAxjEZk6xGx7YmD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c31265eaee76f0ffb42eecee6c5bfc9_JaffaCakes118
Files
-
0c31265eaee76f0ffb42eecee6c5bfc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: 61KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE