Static task
static1
Behavioral task
behavioral1
Sample
0fc3f22832560b44dc3eaf4eda5202f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fc3f22832560b44dc3eaf4eda5202f4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fc3f22832560b44dc3eaf4eda5202f4_JaffaCakes118
-
Size
103KB
-
MD5
0fc3f22832560b44dc3eaf4eda5202f4
-
SHA1
9d4ca30a1935233a6ff7d7f2d279c582733e9f27
-
SHA256
5a24e66f6d1f5deb8bf39f0fad9ac4357b3ee9b42ce43237d45971c1835135f4
-
SHA512
56046b17a5d6e26e40f7e1768d1cbd759304b3d541d0a21e619d9315d7a11a4027fc4d32bbecd0bcf7aa94ae476cbf216b4eef984de11aafbc29cd2268ae0dae
-
SSDEEP
1536:2IKpdcB3jwzZnT/h+eUyyyE4Tr/pP3EFBMnqfIO8dj5S9X/3Fml30R3Z/Gv:2IKe3+LwwXx0FWq8dj5SV/3U05VA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc3f22832560b44dc3eaf4eda5202f4_JaffaCakes118
Files
-
0fc3f22832560b44dc3eaf4eda5202f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.abzjuo Size: 886B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.y7egdd Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7tv0tc Size: - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xftl85 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 101KB - Virtual size: 104KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE