Static task
static1
Behavioral task
behavioral1
Sample
0c438f1902b466c895dd3dad702127aa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c438f1902b466c895dd3dad702127aa_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0c438f1902b466c895dd3dad702127aa_JaffaCakes118
-
Size
197KB
-
MD5
0c438f1902b466c895dd3dad702127aa
-
SHA1
58cfc2a884cec921e0eaa3d768448443ae887ac3
-
SHA256
1f166e28069392ee0fb9e2010915eab766aac58120c01c7c71ec3495f919192c
-
SHA512
7a3fe9ce006a82649c5ba9085ff92b1882295791ec4781ac8910db097dc9bb8245c23e1a924653be97368e44d7c0408c188742549bcb4d9591a279698926b1cb
-
SSDEEP
768:eGnAwLa0RG9G6M4Au7Dm6LOKWDXcAyJ7SIpqfAKR:xLLa0u3AuZ7WDsAy5SIhKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c438f1902b466c895dd3dad702127aa_JaffaCakes118
Files
-
0c438f1902b466c895dd3dad702127aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 268B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ