Static task
static1
Behavioral task
behavioral1
Sample
0850d3eb4e3d6f06523a82c753dbc625_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0850d3eb4e3d6f06523a82c753dbc625_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0850d3eb4e3d6f06523a82c753dbc625_JaffaCakes118
-
Size
24KB
-
MD5
0850d3eb4e3d6f06523a82c753dbc625
-
SHA1
12c691ea42064f2799533286cd2075bf688f3f3d
-
SHA256
cb6cb1fa7d58c4a5ff4891387ef0ef2470c7b95d0e7ed4a30eff8d636ab7ace7
-
SHA512
b0d624a02b86a63eb05f2d8c393ff38f62e04bbc816c775705b04c8ba2f6d06b8643abfdb13f9e701e405b04608107c07364a2f73b0f727838b756b2ad8be157
-
SSDEEP
384:mPW/Wn4HKGOuW56rxyzN9F8Y9zwcTjjORm6YG8TamQ44pllJXZ/BOPW1c:Lq/5AURbNjMm6RmkplKPUc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0850d3eb4e3d6f06523a82c753dbc625_JaffaCakes118
Files
-
0850d3eb4e3d6f06523a82c753dbc625_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
d+�0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d+�1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d+�2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE