Static task
static1
Behavioral task
behavioral1
Sample
0895d186adea3d88ea4b91f8921365a0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0895d186adea3d88ea4b91f8921365a0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0895d186adea3d88ea4b91f8921365a0_JaffaCakes118
-
Size
63KB
-
MD5
0895d186adea3d88ea4b91f8921365a0
-
SHA1
38b2e7a7b5ac7e6dc8f409e438019e92f718b01e
-
SHA256
5c5afdcb449f3ffb5b96e03c8f0dfe268d375d2ed726243477938cd576dc3b29
-
SHA512
5f486afc4d1f48623e27ba1900e0ff2d1877d8978945c82bbdeb68da7130334547c24bfb508da43bd0be1e2a217f70e8efdfb0ea4971d82ad456c131ebba1619
-
SSDEEP
768:IwBeuddF+iw6f4H51NQiVtSBhiYbOEtm1MOy/Arf4P+LZNW0GXWh:dBemdF+4fWSItS/iWm7bh4XWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0895d186adea3d88ea4b91f8921365a0_JaffaCakes118
Files
-
0895d186adea3d88ea4b91f8921365a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE