Static task
static1
Behavioral task
behavioral1
Sample
0a33be5dd08285a21a78be57059c73ed_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a33be5dd08285a21a78be57059c73ed_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0a33be5dd08285a21a78be57059c73ed_JaffaCakes118
-
Size
20KB
-
MD5
0a33be5dd08285a21a78be57059c73ed
-
SHA1
61f1e0fa138fe38e1e71398e0749bd5b1ae011f7
-
SHA256
195356dbc596ee4c9a183146b92b171d952e0c874d54789e96b2876294595e03
-
SHA512
68bc9f7f51729d4f8b4348f5c56130972a1183e8203494a2a6ed9f57c5e701a105ed6163e6c77e938040ea24c5a608a84386e6cc5bc105582cca162312127756
-
SSDEEP
384:BIfwz+9LlVZcLrqAsN3qPU7sBgRWt+yFWo2s/SJLCfuCI:BIe6urtIan0OrGnr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a33be5dd08285a21a78be57059c73ed_JaffaCakes118
Files
-
0a33be5dd08285a21a78be57059c73ed_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 677KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21.1MB - Virtual size: 21.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ