Static task
static1
Behavioral task
behavioral1
Sample
0ddee4b3ce1cfa6fbb2db19b4ee75cd7_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ddee4b3ce1cfa6fbb2db19b4ee75cd7_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0ddee4b3ce1cfa6fbb2db19b4ee75cd7_JaffaCakes118
-
Size
367KB
-
MD5
0ddee4b3ce1cfa6fbb2db19b4ee75cd7
-
SHA1
2e7581dfbb21922f868ebb7af990e77327b95048
-
SHA256
07d19446b7da2bed600fe515a7ef02f5312fb020cad28d7ce33d69ab33569a53
-
SHA512
1845d642e5c3f851c293187eec248053cede60f4b503a804f17b04eb4b1b07882546bcfdc7489376f8a4835af911645349578743507ee36dd207d9e483aa5cbd
-
SSDEEP
6144:s49G3J+48pmzZ2loPeskGoZJynlA3UigWPoxBGLUi8VR1/1OYPsOIFIn1:s49G3J+48UzZ2pswWnOEi0zji8VBOYPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddee4b3ce1cfa6fbb2db19b4ee75cd7_JaffaCakes118
Files
-
0ddee4b3ce1cfa6fbb2db19b4ee75cd7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ