Static task
static1
Behavioral task
behavioral1
Sample
0ad18d22698170692059795d5f55ecb3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ad18d22698170692059795d5f55ecb3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ad18d22698170692059795d5f55ecb3_JaffaCakes118
-
Size
216KB
-
MD5
0ad18d22698170692059795d5f55ecb3
-
SHA1
41ec98a3103b492358d94a6b0bbc644ad309d703
-
SHA256
ef40f98268f10f82bbd5bc642eaf1f325120b3b13c30ecaa23cececb6441eaab
-
SHA512
b3314407a7db3dee9ecd5177629db91eb0ebe6f3e8a19ad66b4f2ab50bceed4588d42a7848f7a6144c8cb2a36ac4cbb569396ff0e07586d9b6ea5417b0337120
-
SSDEEP
6144:39v+pKJDHVEcl5lAE0eq2mxBYf55s8lSCWsnZ1vZ+KaeUSa:39y8HVR5lAEhu6f5ICWsbR+VSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad18d22698170692059795d5f55ecb3_JaffaCakes118
Files
-
0ad18d22698170692059795d5f55ecb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
woGWYL Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aS Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SPRLPJ5 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE