Static task
static1
Behavioral task
behavioral1
Sample
0b0e70539983cd8723d2301d5fbafa71_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b0e70539983cd8723d2301d5fbafa71_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b0e70539983cd8723d2301d5fbafa71_JaffaCakes118
-
Size
8KB
-
MD5
0b0e70539983cd8723d2301d5fbafa71
-
SHA1
3a675c4c6ecf48a47f1d0d94de87134fb2e17b1b
-
SHA256
457651f4a0c9d2376ed510c9949d9dc34977b7ea2ab563cd9a761019d5d6eeba
-
SHA512
b172fa44a228e51e86498141b2e7a4836d77eea8f73b243dbf23e4fc187933cb1ef4f5468073c754a8883b335c95ae44afac0a099391894f2db1905a562b1857
-
SSDEEP
96:wOaBMc3mjCigMeUcthqBHByjS5X/QH7Zo4hNXpONnKs50Pc3KLdouyWUgESeewj8:xG/31igNTIIto4hoMc3KYWjKkfWkgBw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0e70539983cd8723d2301d5fbafa71_JaffaCakes118
Files
-
0b0e70539983cd8723d2301d5fbafa71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 352B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE