Static task
static1
Behavioral task
behavioral1
Sample
0ff293b7c46e6967b3c0206a43a5fa27_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ff293b7c46e6967b3c0206a43a5fa27_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ff293b7c46e6967b3c0206a43a5fa27_JaffaCakes118
-
Size
410KB
-
MD5
0ff293b7c46e6967b3c0206a43a5fa27
-
SHA1
283abd204dd2da34f0c6edececa8eef5a4f89bca
-
SHA256
07091ba86d1035d8aa48625b1526d6671c81d70d6b8ad8ab86e9e697a4f9f3ba
-
SHA512
d4efda0e4e1ed80d284f1fdc8ef80e52d01469e8c8e236d98c75c70c8e8e14fae809875338bef069a4f7734712304d9a857a0cd6e865a7f4a48af2843b5f93e8
-
SSDEEP
6144:zjFGXsco9RSTglIVcBxWfWWJ6Yrd48u8+7zeMkEd:zxvxWeWEeR+P0c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff293b7c46e6967b3c0206a43a5fa27_JaffaCakes118
Files
-
0ff293b7c46e6967b3c0206a43a5fa27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ