Static task
static1
Behavioral task
behavioral1
Sample
0fc1657db0e8c2f1ee017b5fb337ed29_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fc1657db0e8c2f1ee017b5fb337ed29_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fc1657db0e8c2f1ee017b5fb337ed29_JaffaCakes118
-
Size
57KB
-
MD5
0fc1657db0e8c2f1ee017b5fb337ed29
-
SHA1
cc55640fb4355c2272b3bf6736ee1157e9679603
-
SHA256
55d639516f09d8f2c9989c03234e3e827f52c3fe8c60a18c5620d02f568afa08
-
SHA512
d2e812655e338ca540aadadbaa9e2e75bd59840e8965bbe9373ca136e7870ed48eb758f1961e979c7d728234407d1f1ab5d9e164da8ecc3fde69d9873d628042
-
SSDEEP
1536:2N0hTP5c3XfSq7BJfAef9RUgq3/WBbSI3hA9Cg:2sTyfSq7RvUUOI3y9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc1657db0e8c2f1ee017b5fb337ed29_JaffaCakes118
Files
-
0fc1657db0e8c2f1ee017b5fb337ed29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 46KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shield Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE