Static task
static1
Behavioral task
behavioral1
Sample
0d6ac80973eb06027852776b34e2f0de_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d6ac80973eb06027852776b34e2f0de_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d6ac80973eb06027852776b34e2f0de_JaffaCakes118
-
Size
54KB
-
MD5
0d6ac80973eb06027852776b34e2f0de
-
SHA1
8451a6b425f80e3c889d1e058300000c5e98012b
-
SHA256
a70c9df5ed63aea21ee5a9ae38921c9c5dc3031d0b7355f09d3bbdebc5c3ba06
-
SHA512
40b43dd92a9f4f2eab3ab07c9db15d7d6a33406227d82c9a77b8ef906a1db4fe0e46a4a29abc167eca436926e705af037f1dc8ef9bcbe68ecd298f8d3a81c80d
-
SSDEEP
768:yiBk5bttpS73XNSW1MEb2wD5SDdPL0JoB1eY6O7/grE0SzNQ5TF1EUw90tClRzaE:Gbttu3XW0SdPiBhsQNEFn0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6ac80973eb06027852776b34e2f0de_JaffaCakes118
Files
-
0d6ac80973eb06027852776b34e2f0de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 53KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE