Static task
static1
Behavioral task
behavioral1
Sample
0ff1631ab16b4c6ca01503f4b242ed88_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ff1631ab16b4c6ca01503f4b242ed88_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0ff1631ab16b4c6ca01503f4b242ed88_JaffaCakes118
-
Size
8.1MB
-
MD5
0ff1631ab16b4c6ca01503f4b242ed88
-
SHA1
91465e1cebe0a0c1441c4a6db60bba94129b2520
-
SHA256
24fa37bb17194398a1ba414fb4a9f064976460b90b4b7416df937f0a14413877
-
SHA512
56c321096404d8cc2771569ca827a26cb9c1641b77f526d8e7b49f1279accef48af163e1f1cb317c8af39736c8561d48f48c3c0f7e00b8bf22854c9e214ca269
-
SSDEEP
24576:XdayHQeN/7DSBfWhc96H0bDoJJJJJJJUCA5rR2ROf1IegqutJQ5FeQzcuC4r6HQu:XYgph7GBfWLHdGR2RAR5FeA6wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff1631ab16b4c6ca01503f4b242ed88_JaffaCakes118
Files
-
0ff1631ab16b4c6ca01503f4b242ed88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE