Static task
static1
Behavioral task
behavioral1
Sample
0b3f7e0c9f037b84ccf550185a407440_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b3f7e0c9f037b84ccf550185a407440_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b3f7e0c9f037b84ccf550185a407440_JaffaCakes118
-
Size
29KB
-
MD5
0b3f7e0c9f037b84ccf550185a407440
-
SHA1
6bf11ce796bba20317930958549cfbec1efa8f0e
-
SHA256
184d9f4758a99f13aa50b91c568122c27840ff3a76ab550648541a4ba307b899
-
SHA512
126386add30ca1e676df0a8c6b2c0549ea88470a91ae82c48b628bb0f08579ba14716f53d355491798e71ddd3d437086aacdddf4e6d6d699ac18125495fdc26c
-
SSDEEP
384:BRKcXQrgpDjJ//SL5DG15GzWQWZHzb1NUwssfloLGgWp2A5A7MKSoCk3e98zhZ6z:pXfjJ//AyggnJoa3pedw8G8wD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3f7e0c9f037b84ccf550185a407440_JaffaCakes118
Files
-
0b3f7e0c9f037b84ccf550185a407440_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PESHiELD Size: 21KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKIN98 Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE