Static task
static1
Behavioral task
behavioral1
Sample
0fdf6dfcdef527673b71d173eec121e8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fdf6dfcdef527673b71d173eec121e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fdf6dfcdef527673b71d173eec121e8_JaffaCakes118
-
Size
193KB
-
MD5
0fdf6dfcdef527673b71d173eec121e8
-
SHA1
482baee1bea371df941826d71bb2fd1f032fb161
-
SHA256
f282133864620dd7d9c1f2e043b6ddd7df478a34c68b845b9dd413ab4eb9b4f0
-
SHA512
bf596a447a932a2f0471b7cf33701b6caba1b902c4208a2e0731d266414d45d704be0fc2cd76103137722d541600cd6fbc2ccc47ccc4ed9424f86e01f03143d4
-
SSDEEP
6144:JiqvdXjgwTcx6Ezh4Pm0mJqHSzE+NFRzMIsqp6AS3Yok9y:JigdXMwI4EzimKy7lT9y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fdf6dfcdef527673b71d173eec121e8_JaffaCakes118
Files
-
0fdf6dfcdef527673b71d173eec121e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
V��;~��� Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u??͐�L� Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[�E-�A? Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
>�����\ Size: 444B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE