Static task
static1
Behavioral task
behavioral1
Sample
0fc03dcb0b99ecb433ee4040f7866277_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0fc03dcb0b99ecb433ee4040f7866277_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fc03dcb0b99ecb433ee4040f7866277_JaffaCakes118
-
Size
38KB
-
MD5
0fc03dcb0b99ecb433ee4040f7866277
-
SHA1
0e2cdd27384c59c7338615b4d28fd5e9a30d0f4f
-
SHA256
d876931e4f2c68d12f96874b68390cd716e6edbf9e984f714918d8da30e54e3d
-
SHA512
4a4509ab71deb2d099b7a9dae2c3d9775295e46fd13921ae27f67eef8d98bb94b253cf797c376f4e199eb1606136ed227b719a6a614e5d41202741ba77f32cf2
-
SSDEEP
768:dSDEjdWInZSfPhWH9VO6uX3tDu3XV95Ri7RO1lFlW6GjYN8:wAj9YVu3VRYRmFPGjm8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc03dcb0b99ecb433ee4040f7866277_JaffaCakes118
Files
-
0fc03dcb0b99ecb433ee4040f7866277_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ