Static task
static1
Behavioral task
behavioral1
Sample
0d66173f740e0af33db6ef0de10bdaf4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d66173f740e0af33db6ef0de10bdaf4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d66173f740e0af33db6ef0de10bdaf4_JaffaCakes118
-
Size
97KB
-
MD5
0d66173f740e0af33db6ef0de10bdaf4
-
SHA1
5f8bd2c54e799ba3ae39f093e3358d5c43ce7d0c
-
SHA256
4323e2750ab86019a361421d8dfb55e04757ccede42a094cdee4dd9a990cf83f
-
SHA512
4b9c2d174637e6d6f3ed7dd642f7dad8ab12cc9748d364c80cedc313978860c4685d22833e1c8c4b6e1ea5322dada2f9a6368d77547dc09829c46554ef479ad6
-
SSDEEP
1536:79SuXRwMyJ0hIrTLx6GXzHzK0OMj9ZC5FPgNXss6VshpQ7g42v7ts5z7AcWvo:ZtRwMyJDvDK0Xq5sclf7g42vJsJ7dWvo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d66173f740e0af33db6ef0de10bdaf4_JaffaCakes118
Files
-
0d66173f740e0af33db6ef0de10bdaf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.xcsd Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hnbg Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.okuj Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hngb Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcxc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE