Static task
static1
Behavioral task
behavioral1
Sample
0a63fe812e8ef54fed4a8716bba72ff7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a63fe812e8ef54fed4a8716bba72ff7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a63fe812e8ef54fed4a8716bba72ff7_JaffaCakes118
-
Size
34KB
-
MD5
0a63fe812e8ef54fed4a8716bba72ff7
-
SHA1
31b2cc8e4cdcde43da2a8b3321256a7c01f95147
-
SHA256
b9913c600e35ab58b69c74aa8407de4e74a7165c35d015ab49125f1dc91c1302
-
SHA512
81af7e0eef47e75e40d9b329b290f28e3110e5862060f9eeb59edcad190ef4727920b275fbf52a4e737d717a4c85eb32c366532dcac6c428a3331ba50f676e8d
-
SSDEEP
768:zobJdKwlVX0yKOmMGIR0nqYyHMh3oYVUSk1dAIhH:z8KwHPmXqPshY6USI1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a63fe812e8ef54fed4a8716bba72ff7_JaffaCakes118
Files
-
0a63fe812e8ef54fed4a8716bba72ff7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrvcq.v7 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
seg2ofzr Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE