Static task
static1
Behavioral task
behavioral1
Sample
0ff586319e218e04659ea84ea5478583_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ff586319e218e04659ea84ea5478583_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ff586319e218e04659ea84ea5478583_JaffaCakes118
-
Size
787KB
-
MD5
0ff586319e218e04659ea84ea5478583
-
SHA1
5e88e72f6b9b6e06e05d3e1f44e2788b17bbaae3
-
SHA256
0af3201407ecd53af04194f8fb9f81a04af0b4ffe9d65b144979e535fdc91e1d
-
SHA512
29ca5168eef366613a6a5960228aab0f6c6a8d12456732551afbbf65ac70fb7802af2cae2c891cb2ae70df94057aab32b27d1c5221e07278b8a71e748cf47173
-
SSDEEP
12288:TKKHXyTN4UdZXFaGeQaQi4N8WNro2LVQUmXSxYHz5Y8rMpoBUaRi5MnwBL4w3Mb:TKIXyN4UbFBeVf4D62B4XxYzok4wBMXb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff586319e218e04659ea84ea5478583_JaffaCakes118
Files
-
0ff586319e218e04659ea84ea5478583_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE