Static task
static1
Behavioral task
behavioral1
Sample
0c2288cc6086eb03f3a3aafacd7f8ecd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c2288cc6086eb03f3a3aafacd7f8ecd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0c2288cc6086eb03f3a3aafacd7f8ecd_JaffaCakes118
-
Size
39KB
-
MD5
0c2288cc6086eb03f3a3aafacd7f8ecd
-
SHA1
49709be29ebc397ddd8961e3a96de016bb47b8b4
-
SHA256
46543549c58e3e48b46290b8e4a067d203be29c8ad1bd179b0b322fe4e8effa8
-
SHA512
e1d074c7d98b9225783a6e8c867cdd01b2449bf8cdcd2e4b5edf802cba423c714d286fc381fdf7f2282d1f1c471fa5b7fe4eecec6fa6340f3cc7a09715485eac
-
SSDEEP
768:iOXFRq5zdf4POzPs3vYCqtQbCTNldzhAoDEZj:vXA6POzgwCqZT3BaoDAj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c2288cc6086eb03f3a3aafacd7f8ecd_JaffaCakes118
Files
-
0c2288cc6086eb03f3a3aafacd7f8ecd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.byte Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.byte Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.byte Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newimp Size: 179B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE