Static task
static1
Behavioral task
behavioral1
Sample
0d38e5b53c9a97264cc953166b4cb8ac_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d38e5b53c9a97264cc953166b4cb8ac_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d38e5b53c9a97264cc953166b4cb8ac_JaffaCakes118
-
Size
65KB
-
MD5
0d38e5b53c9a97264cc953166b4cb8ac
-
SHA1
4b76f95a90bfab57a681f1090cbf5e6d81742b6e
-
SHA256
2cf39d4194c25c7a7f39e66b37879edd18fdeb63f636b2f1c78f512690c834f1
-
SHA512
05bc505c44d9e12e4b8969c2ab4d9b0725784bc31e62b4aee88fc986a6e6b3af440f01d770fb1bcba1f838fe1829030e53872ab710577bee5c57a023e5236f15
-
SSDEEP
1536:cyBH4Salw16N83T5YT8D2zSw8GUnDT73XrZLsXy:cyKSaufNYgD2GwwnDTDey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d38e5b53c9a97264cc953166b4cb8ac_JaffaCakes118
Files
-
0d38e5b53c9a97264cc953166b4cb8ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ