Static task
static1
Behavioral task
behavioral1
Sample
0ae27304f3375b38be08349ede5c778a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ae27304f3375b38be08349ede5c778a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ae27304f3375b38be08349ede5c778a_JaffaCakes118
-
Size
443KB
-
MD5
0ae27304f3375b38be08349ede5c778a
-
SHA1
76d86c62864f0a5f75c9490ee905e90a6912e97a
-
SHA256
d05ad64585c7937330a3ee5450ac35b671f49fa319e7844382d054ab5770b87c
-
SHA512
e63c08dfb9d37b80afb1cb407b3267b3f4244f40bbb76a75b4d14ee482e7b2ec7cb399d605869eb1212e6fe785849938363ca05de6ca7e3397f24a6a25d8c70a
-
SSDEEP
6144:Bekxl58D4RwaBWK6Y9xaJsHZVn+aCP0vdZhhL0MTBpk8GJ6cWSQz:Bek73+QWAnbWPCZHBPb6YS+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae27304f3375b38be08349ede5c778a_JaffaCakes118
Files
-
0ae27304f3375b38be08349ede5c778a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 97KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dshfgsd Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE