Static task
static1
Behavioral task
behavioral1
Sample
0b466963f90517dcc12f7bd405455fa0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b466963f90517dcc12f7bd405455fa0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0b466963f90517dcc12f7bd405455fa0_JaffaCakes118
-
Size
126KB
-
MD5
0b466963f90517dcc12f7bd405455fa0
-
SHA1
73017fbaa1aa131c32d7ceab2e7a793af6313976
-
SHA256
76d6758d6ecb15b2e77c792a99df490b51c93b6ea4300d199e62d497d9c5ef13
-
SHA512
132255bf56cd636b85b26310d394286128ef6a5cb1046b9b16067c8d4da6304bc74eb45bc5200bbfec88f0d2d417c0ffb659c16841a9fc2146fe225480e0839c
-
SSDEEP
3072:J3yhqz3uTg3sFucRY4B86T6icyMn72BXt9U8Vj9w1wwi3uri3uPARFrfB8:wc0g32ucRRB86T6DyOSBXzU8Nmq4HPAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b466963f90517dcc12f7bd405455fa0_JaffaCakes118
Files
-
0b466963f90517dcc12f7bd405455fa0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 125KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE