Static task
static1
Behavioral task
behavioral1
Sample
0d11155dd3d0558e7f5df6c3b0c7225c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d11155dd3d0558e7f5df6c3b0c7225c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d11155dd3d0558e7f5df6c3b0c7225c_JaffaCakes118
-
Size
110KB
-
MD5
0d11155dd3d0558e7f5df6c3b0c7225c
-
SHA1
ae0a7f30e5f001c6edefe5fc27a25b37c6e83cb0
-
SHA256
facc5a16859ec3dec8071a1e359a76b2c75352f2d019a95922a8372a7f217338
-
SHA512
69c48144c85de34fd5ce7ba34c1c4ee229092689c97d4ceaf80f95edf2469df6e99f18fed13a4cb08e373f2619fd6dc0b00d23686ff771c0242c15e0d6f5ffe9
-
SSDEEP
3072:wr6h30yu5CZsD8QAtRDREIQy3rbCnlMcPKaeoutol:M6h3UbBAzuy3rbClhGoSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d11155dd3d0558e7f5df6c3b0c7225c_JaffaCakes118
Files
-
0d11155dd3d0558e7f5df6c3b0c7225c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE