Static task
static1
Behavioral task
behavioral1
Sample
0fba42329b0a1c08fb15808e2cef0ae0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fba42329b0a1c08fb15808e2cef0ae0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fba42329b0a1c08fb15808e2cef0ae0_JaffaCakes118
-
Size
35KB
-
MD5
0fba42329b0a1c08fb15808e2cef0ae0
-
SHA1
e7ee2c456c3442d8bd82d3ccd2ec836edf05cf74
-
SHA256
c26d11c72d99b5f2b8b04c68c8d25ba8c43491a8d5bda5bed491b56ff8142dfb
-
SHA512
56b2c132e796417ced154468edb3c7bc1990e74df265a8953a866fe45887b3a7a2eae3667aca02a9f0a2825f64f762e010a4f55635f9fe3bf785d7909a4d4db2
-
SSDEEP
768:jAYk97s1jG7vqPuwP9m2XIwtgvQZTWg86SZ5Q:E9A1jGG5P9BFOopWg86SnQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fba42329b0a1c08fb15808e2cef0ae0_JaffaCakes118
Files
-
0fba42329b0a1c08fb15808e2cef0ae0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ