Static task
static1
Behavioral task
behavioral1
Sample
0cd0a719f9f91630de366c54c427a834_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0cd0a719f9f91630de366c54c427a834_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cd0a719f9f91630de366c54c427a834_JaffaCakes118
-
Size
72KB
-
MD5
0cd0a719f9f91630de366c54c427a834
-
SHA1
4f897ba32d09cbb18f89fb729519e447d8b7b90b
-
SHA256
c191736397d2bb14fcea8dc8b1b1334b809098a0f898ac97725d2f976f0d453a
-
SHA512
d82f9ba092208789740519362bf19e9af96e65e0bb765084024073ef9722561f7321688a1aaf2290974bc6a26fbc510e24bcd8c8cf62316eb745876f9c950f49
-
SSDEEP
768:EqRsqPi5byhG5e9ljYCb0JyDC5lP8u70SfEj+ULJ10hCupseKxszG9hwrpY0UJXl:FTPkbpjn570wEj+Ut1OCuppowICp4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd0a719f9f91630de366c54c427a834_JaffaCakes118
Files
-
0cd0a719f9f91630de366c54c427a834_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE