Static task
static1
Behavioral task
behavioral1
Sample
0bbe7803effc3595209b94a4c5446052_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bbe7803effc3595209b94a4c5446052_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0bbe7803effc3595209b94a4c5446052_JaffaCakes118
-
Size
357KB
-
MD5
0bbe7803effc3595209b94a4c5446052
-
SHA1
365360b3abc3a630ab43ec0a07afe9781bf99779
-
SHA256
6ae8092254fed23a7840bc3472edfc33e1bed630453a74003c856691f57fc59b
-
SHA512
5a8fea64144a8cdf1e17832ae09146d0575e2b75987183bb7d20d17239e4d65b5ec9e622dc9e20b8fe7af80256847446b4acb400c68a7fa1136ed29816e4fa01
-
SSDEEP
6144:XTpeMZ2EygUAWht/07O/VW0T9t/PxEtL2d0QF34P8Wczmo3WMQ2HRop:XTpeMhL/DeVWM93EtL2dGkT9NnHRop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bbe7803effc3595209b94a4c5446052_JaffaCakes118
Files
-
0bbe7803effc3595209b94a4c5446052_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.DATA Size: 515B - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 356KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE