Static task
static1
Behavioral task
behavioral1
Sample
0ce2b3ee233675aea81b61b1bdb512b1_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ce2b3ee233675aea81b61b1bdb512b1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ce2b3ee233675aea81b61b1bdb512b1_JaffaCakes118
-
Size
351KB
-
MD5
0ce2b3ee233675aea81b61b1bdb512b1
-
SHA1
9113c665bf71929d0908c8384b783e8ecd964eac
-
SHA256
4ec06330e0f7e0ffe77080d64cc95cf41a0f2c26d4e9f055ddf1aca7d337128f
-
SHA512
9ae4e0fcfe1391882f7d782883c187d67b0a0be9f556d56000bd820a55034cb0a6c7c4d03e5a53d83a9b2b6798908b75a5170c74c48d4c21a0ca607ec8a797a8
-
SSDEEP
3072:4cLicxTqrt/h5oJmfMaX71iBKt78m984C1HBlc8/bvVgCQbEGxZmgOB5ZQm:BGcxAJcEfsTvV7qs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ce2b3ee233675aea81b61b1bdb512b1_JaffaCakes118
Files
-
0ce2b3ee233675aea81b61b1bdb512b1_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE