Static task
static1
Behavioral task
behavioral1
Sample
0a53d0a60b6156483b4287650311b144_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0a53d0a60b6156483b4287650311b144_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a53d0a60b6156483b4287650311b144_JaffaCakes118
-
Size
402KB
-
MD5
0a53d0a60b6156483b4287650311b144
-
SHA1
37d11c916913f216f391101ab1a3454a835fc811
-
SHA256
902529f4bbc7e64ab622bb0d8bc84b43e87307a29cfc6e24fb9c4ce5f947fab3
-
SHA512
df27f8bdcd2f8c408fef124a5c020456cad1bf8cb56a8fb49a51e36384c6c0a9920f14838f658a7953e85fe6a71f79e80fff688d812b97a8a373c68766b1d3ed
-
SSDEEP
6144:ASmHB/U2l0ELNn8eYkkrF2rSh64gFz/Kskh1ymcwjkYOoujxj6sf:shblxLNnLYk2KShNsrkzyo47oQN6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a53d0a60b6156483b4287650311b144_JaffaCakes118
Files
-
0a53d0a60b6156483b4287650311b144_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 113KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE