Static task
static1
Behavioral task
behavioral1
Sample
0ae445e83fd62e1416a80b3ac26d3c31_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ae445e83fd62e1416a80b3ac26d3c31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ae445e83fd62e1416a80b3ac26d3c31_JaffaCakes118
-
Size
432KB
-
MD5
0ae445e83fd62e1416a80b3ac26d3c31
-
SHA1
fbf0a7580696bddc6b26293d952b644d76ffef4b
-
SHA256
badd63531b1e9d6eb7af96b02155402230c5247a775462e16c478128a2f148d9
-
SHA512
accdb792bbfa9815cb314637a4a9f37194b145b10eb7d7e9b660af849e26655e1479f143870a591f7ff3991f8c71fcdd38e225b62acfcce2730eeb26aa7f4e0e
-
SSDEEP
3072:rmw9TewTIsvPYWM9rELKiTNvsAgb2uo6XoUesdsdVwuXIkNsFBlg9Oy:Nawd19KoY4UesdsdVwuXjcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae445e83fd62e1416a80b3ac26d3c31_JaffaCakes118
Files
-
0ae445e83fd62e1416a80b3ac26d3c31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE