Static task
static1
Behavioral task
behavioral1
Sample
0d4e13c6e27c5cceb9aecf87e0d27993_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d4e13c6e27c5cceb9aecf87e0d27993_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d4e13c6e27c5cceb9aecf87e0d27993_JaffaCakes118
-
Size
176KB
-
MD5
0d4e13c6e27c5cceb9aecf87e0d27993
-
SHA1
f7e97f57ec09b448fd19b9a76430c7397c1434d2
-
SHA256
6e0d1fdb6a878d40bf6fb7201d07803223b997f5971f000ba9f03ea19a661f36
-
SHA512
9eb44565e456a48c40005f8c40813661a18ba40292addb73a2f48a90df165676a6e4d35df2267be8ec83759751fd778ad9a46ee3f0f2d57ec09e4083ac0c2326
-
SSDEEP
3072:iK9T+GkFetjIQdF6s7Jq8J6tewVTBX4a6c+BLHjhzlnZIA1:Z9T+petj1nJ6ECBX4JcqtztyA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4e13c6e27c5cceb9aecf87e0d27993_JaffaCakes118
Files
-
0d4e13c6e27c5cceb9aecf87e0d27993_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE