Static task
static1
Behavioral task
behavioral1
Sample
0a334c4f60144ca5bf23ef2f5b0d8fa3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a334c4f60144ca5bf23ef2f5b0d8fa3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a334c4f60144ca5bf23ef2f5b0d8fa3_JaffaCakes118
-
Size
195KB
-
MD5
0a334c4f60144ca5bf23ef2f5b0d8fa3
-
SHA1
6706b3607609e14247fd8d5acd2cba2181f0228c
-
SHA256
58e94e149fafb0119371fd7e8bb7c879b8f76aabbf99b21b205a403c455a7f3d
-
SHA512
ff7f3eb2127e2633b1382b688935c473ad5de0a7d70a9a735b1cd222f7faf7791e3db1a41881e15b93bb86747ae935bfa179cb5b1073035a8bbc52df18f431b2
-
SSDEEP
3072:L96LYPrY9RjZzGF7bS0I2Q8No/5V5CRFG+1Jar4vv/AMjq7FGcmebHo6zS:RxDoGF7+0Iqfc+EbM+hGcmeMyS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a334c4f60144ca5bf23ef2f5b0d8fa3_JaffaCakes118
Files
-
0a334c4f60144ca5bf23ef2f5b0d8fa3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.cojtev Size: 2KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3zotan Size: - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xa38p6 Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dqsboq Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e9ld4x Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.66mqfe Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bco4dp Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 188KB - Virtual size: 192KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE