Static task
static1
Behavioral task
behavioral1
Sample
0876c62bf5947814c976453f52f00496_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0876c62bf5947814c976453f52f00496_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0876c62bf5947814c976453f52f00496_JaffaCakes118
-
Size
32KB
-
MD5
0876c62bf5947814c976453f52f00496
-
SHA1
e41986037037d913c7536585fe071fc587288f3b
-
SHA256
0fecd14dbf5b1527b20008b9ca36a1eb088afc7b56cd99517c3fc2e9fc9d9992
-
SHA512
d0e5591168b270c44819b8aacba447cd18ecf7276af0c591db1dc5acea1c9ffa5931c64f0c11ee9bed07040622136c15d37691daf84afb949ef50bda3756e13a
-
SSDEEP
384:L5bQtq+b32vDTuKnJAuR/7VKZDTG+ifRGNSU9Sq0/VNteG/tYgno37fLjeU2RgVH:N+L2vuKuu7+UI1iVTo3DLjLwgbSdVA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0876c62bf5947814c976453f52f00496_JaffaCakes118
Files
-
0876c62bf5947814c976453f52f00496_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
� o0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� o1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� o2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE