Static task
static1
Behavioral task
behavioral1
Sample
0da9335851ef1f4dfa18d5bd98602737_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0da9335851ef1f4dfa18d5bd98602737_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0da9335851ef1f4dfa18d5bd98602737_JaffaCakes118
-
Size
2.0MB
-
MD5
0da9335851ef1f4dfa18d5bd98602737
-
SHA1
3677609d39e4792e37839f4c357f5000468a38c6
-
SHA256
1e13b97333742b2c35d7f273b865bc794132ab3b3771610e3a05883bf9b20c79
-
SHA512
577371517d6bf4b8da3fe0fabd70f7467426dd837c789ebafb950095ed52d3e0e225b22df9575f58018e19eca0de8c7ed807fad8253c5d0333f320d2bccd7155
-
SSDEEP
49152:N0QIsL+9j4nnXnYrMT9dthueDmjQRcgby03OjxB:vIwNXaMT9dvDmjQRG030r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da9335851ef1f4dfa18d5bd98602737_JaffaCakes118
Files
-
0da9335851ef1f4dfa18d5bd98602737_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 210KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 750KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE