Static task
static1
Behavioral task
behavioral1
Sample
0d412b1f0525c4fba0106481a18d9fc5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d412b1f0525c4fba0106481a18d9fc5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d412b1f0525c4fba0106481a18d9fc5_JaffaCakes118
-
Size
49KB
-
MD5
0d412b1f0525c4fba0106481a18d9fc5
-
SHA1
38789519b069d47c9d2ddbb8f293ec1bd4c86d8f
-
SHA256
991d04fa48489d9ed55102b007176833de84c3dc19b1eedf24b8827a24a57412
-
SHA512
2584cbf0524a7b7e0d880602ed85e19a5d1987c334cec779dd57bf73761ce59f3e88d1711c9662bf8911802e2bebb0c4359a80c8030967baa075831467183b17
-
SSDEEP
1536:Ua26q2QcyxQ+kAo5KgzZYNJxOry79oCVlgfQkcO4:1BZBj55KgzZYNmry79oalgfFc3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d412b1f0525c4fba0106481a18d9fc5_JaffaCakes118
Files
-
0d412b1f0525c4fba0106481a18d9fc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
!@EV0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!@EV1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!@EV2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE