Static task
static1
Behavioral task
behavioral1
Sample
0cae70c5d34aaaa8cb428e6ef1ad5e30_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0cae70c5d34aaaa8cb428e6ef1ad5e30_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cae70c5d34aaaa8cb428e6ef1ad5e30_JaffaCakes118
-
Size
409KB
-
MD5
0cae70c5d34aaaa8cb428e6ef1ad5e30
-
SHA1
631472da7d858b2031c23a71278af55dbd6bf4b1
-
SHA256
aa2ac0d74606ee020dfc41a5a3109124d422f86c7fdd1322f5e59251587240f9
-
SHA512
3427f45cd64ddfa5402b0618ac5820787943081890287e2412fa235dacb6d8c05c4fd42d648afa5dccf498e254cf8fc57b4e681c8a215e14cb6aba66b2d93a75
-
SSDEEP
6144:W8C7mcfYO0z1D6VMlf3XJn+aCyIK3ccnMxjzS6TI5BIbhr4QCUWH556pJFpHj:WUE1QZ/JpW1K3Dns3LI5qBMUS556pp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cae70c5d34aaaa8cb428e6ef1ad5e30_JaffaCakes118
Files
-
0cae70c5d34aaaa8cb428e6ef1ad5e30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 141KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 240KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE