Static task
static1
Behavioral task
behavioral1
Sample
0d33592875344a0f8f2aeb5b980fb4f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d33592875344a0f8f2aeb5b980fb4f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d33592875344a0f8f2aeb5b980fb4f4_JaffaCakes118
-
Size
27KB
-
MD5
0d33592875344a0f8f2aeb5b980fb4f4
-
SHA1
d531a2c327b4361ede35a616e80a027b9cff7994
-
SHA256
c6fd91fa6f2a6f6972b01a83b98202413ca8b9b5292707d1e8646af143a5c855
-
SHA512
9511541367cbd34a71668fba210468b3c7d65bd263be4d5acf57c40deb8eaa6c5e62f4e6b805e35a60cb78b12be55003df21c95b8a42f4505920d6cd1539dfbe
-
SSDEEP
384:0GzGm7pwBwXicXi2069mwD3yBdOjuu7nvyUIOHInVzs7xlkF8wOWbWFj9unYo:B3wKd+69mY3yBwjV6UIYMKxlahOZz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d33592875344a0f8f2aeb5b980fb4f4_JaffaCakes118
Files
-
0d33592875344a0f8f2aeb5b980fb4f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sections
���ƖK< Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��E�0�� Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
k��j�KZ Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ