Static task
static1
Behavioral task
behavioral1
Sample
0ff661eb809e0c473a622c989d2d5700_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ff661eb809e0c473a622c989d2d5700_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ff661eb809e0c473a622c989d2d5700_JaffaCakes118
-
Size
424KB
-
MD5
0ff661eb809e0c473a622c989d2d5700
-
SHA1
c5c7caceb9a94d32912581c9c0a62dc7198e57f1
-
SHA256
3a885e9ac7e314bf44b3aa47f743075e6ac1c7f206c1e339c788c5e63e60dd42
-
SHA512
f9dfd69fe2e50186d60cf0f10e35ea02e967b74884c24b483c5f7c02ea715d1c7b2857b3480c82c69766b43a872ba3e74914374b5417a8c44566adca48507724
-
SSDEEP
12288:XkwMbF256gD+WdfiIB3BD2JvjiJEoKdF1zXq8fTFamGwz:f56gDtdfiIhBD2JbiJE11zxTSwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff661eb809e0c473a622c989d2d5700_JaffaCakes118
Files
-
0ff661eb809e0c473a622c989d2d5700_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 359KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE