Static task
static1
Behavioral task
behavioral1
Sample
0a95dbd7e739053b285d9b9453034a6b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0a95dbd7e739053b285d9b9453034a6b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a95dbd7e739053b285d9b9453034a6b_JaffaCakes118
-
Size
301KB
-
MD5
0a95dbd7e739053b285d9b9453034a6b
-
SHA1
5c020fcf538417b66c5542393e1e3dadaf19ee8f
-
SHA256
8d66d445f7f5188042edbbc3b24f08665554d048c2f2c294307c2b7afd2c22a4
-
SHA512
8ea866a83114bda38bf5a8565b2e403449870e62537563c6199a303908573095e1f082dd7211525cd9a06c62bd66fb5344f3f552b03b5af15615a6992e8efb30
-
SSDEEP
6144:BtuIDevxqdSzBWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCOvZUDfQ6w6Bum001QG9:BttDB8st/Hcmwv/rCK1nCQNHJnwsmumL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a95dbd7e739053b285d9b9453034a6b_JaffaCakes118
Files
-
0a95dbd7e739053b285d9b9453034a6b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE