Static task
static1
Behavioral task
behavioral1
Sample
0760b00b592159df46665c8b280908a5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0760b00b592159df46665c8b280908a5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0760b00b592159df46665c8b280908a5_JaffaCakes118
-
Size
34KB
-
MD5
0760b00b592159df46665c8b280908a5
-
SHA1
fc0bfeb9dfaa49223bda35f27056f77fd5ff5931
-
SHA256
2b42b2ac49d461723cfac9ec79cd420acb9024886bb4cc082f9b15a9d3467956
-
SHA512
49ac124804f2e4a5711a32a1a14ea7fbf230a8070a9f9518c676df915a3d6add6626b375845f5957d1bd1c3ccfea8902281344ed78d0908d8c3262d659cab7e6
-
SSDEEP
768:flZ9A3szRXpeugKaVrkn+GJVw51py1ZuozSjOQk:flZS8zRXpeugKa2n+Kw5fyyQpQk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0760b00b592159df46665c8b280908a5_JaffaCakes118
Files
-
0760b00b592159df46665c8b280908a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.hwxmdvr Size: 27KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.evplrbl Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ehnzyjm Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE