Static task
static1
Behavioral task
behavioral1
Sample
0ea9f0966087b53bfc2d686ffe6912d2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ea9f0966087b53bfc2d686ffe6912d2_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0ea9f0966087b53bfc2d686ffe6912d2_JaffaCakes118
-
Size
104KB
-
MD5
0ea9f0966087b53bfc2d686ffe6912d2
-
SHA1
7a33c31a9a2548c5184236053c5033f8bfc1d971
-
SHA256
f9de9869c62e50ecc5232a72e4b684aedd351c51d8c331bd7ad7cdb304acb887
-
SHA512
8352dcea95b7f7a8b5aa382904feaa074f913366d350dc1db25da7f2b0464e2d14feed9666bce7fa73072eea9f4655635ee9f719ff358e39b88aedc811c44c5e
-
SSDEEP
1536:RN3R+ps0OfPjg2X3uIZJN9lNmRfCQGzlBH0c:334mPjVuGJN9lNtQGvH0c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea9f0966087b53bfc2d686ffe6912d2_JaffaCakes118
Files
-
0ea9f0966087b53bfc2d686ffe6912d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ