Static task
static1
Behavioral task
behavioral1
Sample
00ed03971c7881aeb2a6c059fb056694_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00ed03971c7881aeb2a6c059fb056694_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
00ed03971c7881aeb2a6c059fb056694_JaffaCakes118
-
Size
45KB
-
MD5
00ed03971c7881aeb2a6c059fb056694
-
SHA1
35763e0bcfd85f70a58737b7c71a78afd0458bb5
-
SHA256
d3387f95c11682b64d99d06245eb25eb8373e4ddad754571b34fcf535eb7dbdf
-
SHA512
0f6373f19fdf102eae954f2e97d43238a81b77797af3fc35fedb7e0e16f46c785c83f3a2d5c3e33ba16999971b198bcd0cf48c52a2ee4c79218de744ab225eac
-
SSDEEP
768:VCq4pUGc1VvHt2cx4Nbebq6NU7d7RgMHeiikv+v5cb6RS/S5Bac8y5XDHO:VSBsvH9giu7t2M+M2v5NxjacN5XDHO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ed03971c7881aeb2a6c059fb056694_JaffaCakes118
Files
-
00ed03971c7881aeb2a6c059fb056694_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ