Static task
static1
Behavioral task
behavioral1
Sample
0c5aaba6ad7955dde56d280cf46e830c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c5aaba6ad7955dde56d280cf46e830c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c5aaba6ad7955dde56d280cf46e830c_JaffaCakes118
-
Size
148KB
-
MD5
0c5aaba6ad7955dde56d280cf46e830c
-
SHA1
843d5ade2e2d14f4526a0f47264d5db3000946ce
-
SHA256
9accd54ad1277f7cc4ba4a6ab069cf419705659b8e89c4b1cb76812579c89b4a
-
SHA512
9b516ca998160681acbd78457f5d96d2ab2828b91bac6bc64b2e77758492ad60ecfad4cc8b64fb2f9e4bd64d7b5300e006b3d764f27422983a3d72c00a14d00e
-
SSDEEP
3072:mp6rAc6Csvq3RR/bCnk0/MJvPkZOsUjrvcb0/3iMAWfkAmms4Nt1ytv:Y6IXif70/mEOsUjrEoiMTfkCUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5aaba6ad7955dde56d280cf46e830c_JaffaCakes118
Files
-
0c5aaba6ad7955dde56d280cf46e830c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ePX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPh1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE