Static task
static1
Behavioral task
behavioral1
Sample
0d87a4a2468be71cb5a8a30e6b5f2c2e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d87a4a2468be71cb5a8a30e6b5f2c2e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d87a4a2468be71cb5a8a30e6b5f2c2e_JaffaCakes118
-
Size
237KB
-
MD5
0d87a4a2468be71cb5a8a30e6b5f2c2e
-
SHA1
923c754a026cce5799c481284626f6f2aba611bd
-
SHA256
4d8197d1c8afb0dcec511d3b63f6c76ad79fd7f53701afaffff958013e0af2a2
-
SHA512
f02081e9df46b196806c6d5853865f3eee6bd81adf2eb7039f8341062c9e40bb855c792869ccd73b84960bbedf9e89c7e95914bf5b161d6bce3e307ff467524c
-
SSDEEP
6144:2wrFPlMm5Afn+aC1meyUGimMjJpGu0jOhFnJ0Fs:2I9CW1meyUGpUNFnws
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d87a4a2468be71cb5a8a30e6b5f2c2e_JaffaCakes118
Files
-
0d87a4a2468be71cb5a8a30e6b5f2c2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 42KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 190KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE