Static task
static1
Behavioral task
behavioral1
Sample
0d6c712209b2a9a3a6d7bbd409f978a9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d6c712209b2a9a3a6d7bbd409f978a9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d6c712209b2a9a3a6d7bbd409f978a9_JaffaCakes118
-
Size
36KB
-
MD5
0d6c712209b2a9a3a6d7bbd409f978a9
-
SHA1
ed867d52929042e47a719f9f8118512eecfff858
-
SHA256
2c5b9d110d3f6a1214d5599b7955426c13c54b627498a7fcec18c7ce39327647
-
SHA512
2adabb5ac17fccc371c6de81562cc1a5849678f31e9d1c6b9e8ffda995f6feb474ff4bdfd4b004043e1a29c3b83dc84109c20aa70bb8941a897aa1cc3d35c2f3
-
SSDEEP
192:eaA8ERHYLq6+5jytoGH0+uZ1S6tA2mjKL494aZwY5CegfPW:e9Heq6+5LPb24AzjNuqsH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6c712209b2a9a3a6d7bbd409f978a9_JaffaCakes118
Files
-
0d6c712209b2a9a3a6d7bbd409f978a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE