Static task
static1
Behavioral task
behavioral1
Sample
0fe96a3b952131a354eb2d57bffa3545_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fe96a3b952131a354eb2d57bffa3545_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fe96a3b952131a354eb2d57bffa3545_JaffaCakes118
-
Size
206KB
-
MD5
0fe96a3b952131a354eb2d57bffa3545
-
SHA1
5c7db088d865b25676ba9069402cee688559330d
-
SHA256
4321c11c89c4a2d12020ff102a5fa27844c645e1e02ac0b51d12567da7c3cb86
-
SHA512
91f6961117e7c1d7a24a0c0dd2fa069e795db6c10274f4edd22f48bcac3b6f1c2ccbc40dbe30ae4e3e4b0ffba1bd658bd148f6b3ca82f51e4d0f1df58c0f0522
-
SSDEEP
6144:OoJeeP27VisgSTXJ0875leBeXgxufqkyaNU:JHP2lTZ0875legXgxufqky6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe96a3b952131a354eb2d57bffa3545_JaffaCakes118
Files
-
0fe96a3b952131a354eb2d57bffa3545_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE