Static task
static1
Behavioral task
behavioral1
Sample
0fb2ee51058020d8712bb4f816b5141d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fb2ee51058020d8712bb4f816b5141d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0fb2ee51058020d8712bb4f816b5141d_JaffaCakes118
-
Size
436KB
-
MD5
0fb2ee51058020d8712bb4f816b5141d
-
SHA1
a1a6e40f26fe71306af396066df4d5e19a81e7d7
-
SHA256
a9e53fbe70b9267edef6f969b4decdaf0eb6c6010167478f28373d2bd23c580c
-
SHA512
fd6bf0b964c2fd46df8ef7f39da1a897f64abff9aba4e8ad9a96f0751577ea0174929d3c9490c8d0a13aa7a848c60f263d6f143b5c26876fbe39532baaaf848a
-
SSDEEP
6144:tG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcF1PlbL:M7kmAN6omFMb3sGB6UduRfLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb2ee51058020d8712bb4f816b5141d_JaffaCakes118
Files
-
0fb2ee51058020d8712bb4f816b5141d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 328KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ