Static task
static1
Behavioral task
behavioral1
Sample
0fcc311e56e6a6d3b860c65e575b9ae4_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0fcc311e56e6a6d3b860c65e575b9ae4_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0fcc311e56e6a6d3b860c65e575b9ae4_JaffaCakes118
-
Size
264KB
-
MD5
0fcc311e56e6a6d3b860c65e575b9ae4
-
SHA1
a22a03bc3491956c53cffa7d27111d61756230bf
-
SHA256
a7a3807a9010f7586bd6809e3ee6428f784b8ee7f5f78884a1f7e84f26e23be5
-
SHA512
7767ed15ee52acbe7d3b7c65236a3165869c86d78939168af227bb5dbecd912c9c1b3c2dc33c65509a2ce94a4439890bb4973559db3e506cb8ae59a25eb9a90c
-
SSDEEP
3072:E8EHDIP3+zEHI1pEj0R8EbCSuaXZQA0XCT:1tP3ZH+/8aqA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcc311e56e6a6d3b860c65e575b9ae4_JaffaCakes118
Files
-
0fcc311e56e6a6d3b860c65e575b9ae4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE