Static task
static1
Behavioral task
behavioral1
Sample
0fadb4e33c87e6ef8833c9d91b4ba76c_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0fadb4e33c87e6ef8833c9d91b4ba76c_JaffaCakes118
-
Size
373KB
-
MD5
0fadb4e33c87e6ef8833c9d91b4ba76c
-
SHA1
48539a8ce6c5512892264f596f0c1b7d2e9d8db5
-
SHA256
6360b53aeb37680b4eecf2499b9c22a4074a014a0994469fa9c470b4ff3c5e3f
-
SHA512
949fb4c09fc26e5995a93818ad594c8f67d8a1e5d979d1cba3eef0fd1ad04b0444e73dd1205f45b0457457d1ffd805b563e361a2890dd64881c0e02165f7037b
-
SSDEEP
6144:1twgln33WkF2idZecnl20lHRxp3gg5mmNkCfYI4Y8jmkXWxtIMKEaqzQy6h8:1Hl2kF3Z4mxx3539/+y1tIlE8Nh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fadb4e33c87e6ef8833c9d91b4ba76c_JaffaCakes118
Files
-
0fadb4e33c87e6ef8833c9d91b4ba76c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idp Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE