Static task
static1
Behavioral task
behavioral1
Sample
0c9ed65469fd922d2995104dd94a754e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c9ed65469fd922d2995104dd94a754e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c9ed65469fd922d2995104dd94a754e_JaffaCakes118
-
Size
6KB
-
MD5
0c9ed65469fd922d2995104dd94a754e
-
SHA1
5f98d8c6e25ae0e61fa694cfc5a4aa8aa1ea2bf5
-
SHA256
5ba2cb1522949edc3a0bcc68abe3598f8123412f378c9ce1f47cb6d7ba0d758e
-
SHA512
d315a5adfbd6caa9f5fc9c7cf0d2d60d9263437004b71c70372825e5144bfdda57df735ea42820c9ce96fe3d16f8e2cff09d25aea06697f4d427b1d30dcc32ff
-
SSDEEP
96:2aUzr4AoJcl0tRUwOYZTCAcnaIZo7js10OvmobxedCsZC:nWjUOYZTCAcaIZo7jGkobxuCmC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c9ed65469fd922d2995104dd94a754e_JaffaCakes118
Files
-
0c9ed65469fd922d2995104dd94a754e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE