Static task
static1
Behavioral task
behavioral1
Sample
0fe6d51aff8a30005f57eb6962d1281e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fe6d51aff8a30005f57eb6962d1281e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fe6d51aff8a30005f57eb6962d1281e_JaffaCakes118
-
Size
28KB
-
MD5
0fe6d51aff8a30005f57eb6962d1281e
-
SHA1
5f1421ed123b2b276c64bb2ee6cc238fd21a6c6e
-
SHA256
656ee60707e077238f7824c33a5935725d6f90b61423fe2a818f58604625a36c
-
SHA512
fa27e1a483d5f3b99cab15e2da089d61d1f5988d657635ed11ef789e40bc4a968d71f37762716c3000d4b280b614c0369333f0938c7325e28dfbd8b38a7e9e79
-
SSDEEP
768:Ay+TqlPtfnle+4Z3egXHjDL9RuZLzgvC78uUr:AzOlFlZ40gXTjczgvy8uUr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe6d51aff8a30005f57eb6962d1281e_JaffaCakes118
Files
-
0fe6d51aff8a30005f57eb6962d1281e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE