Static task
static1
Behavioral task
behavioral1
Sample
0c31ed28bc40191b7422ffc6903dcf0a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0c31ed28bc40191b7422ffc6903dcf0a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c31ed28bc40191b7422ffc6903dcf0a_JaffaCakes118
-
Size
19KB
-
MD5
0c31ed28bc40191b7422ffc6903dcf0a
-
SHA1
0594bc794b61c6c01e725d00886f37e51220a260
-
SHA256
34955cb9a14d4b7b0bb8ce90e42411fa952e36185ed049d71d3115625b958130
-
SHA512
af5271fb0f4bd46219ff08a17ac9f334b75381cc3dc8b8cb68c033439609c9697fc9ee3bbcd2f0e67914640a620efdde899ae6eccc453563040f3fd6cf06be80
-
SSDEEP
384:LLLwfWWNTyJApJV7Q3ju4RmOteCSdJO2oAppQG7w79pZZxe:LLLwfWWZyJApJV7Q3jugmOYF3r7ppqpo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c31ed28bc40191b7422ffc6903dcf0a_JaffaCakes118
Files
-
0c31ed28bc40191b7422ffc6903dcf0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ