Static task
static1
Behavioral task
behavioral1
Sample
0d8b00f366567957157455fe77911cdb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d8b00f366567957157455fe77911cdb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8b00f366567957157455fe77911cdb_JaffaCakes118
-
Size
537KB
-
MD5
0d8b00f366567957157455fe77911cdb
-
SHA1
3ad4769d56cceae7d9556df850639b351d5c98ad
-
SHA256
d79712ac19821fbbe3e05a0bd5eb9b17e6fe8caab768dd167be5e29434eeb61d
-
SHA512
9ce1d9595853bb074ee483e870306dc511bf3665d5689e0fec384d11fcc4473a6c76f8e6125d9cbdbbbe4e2796915791ef79411b163b944449f778c65fd84b82
-
SSDEEP
6144:a+BH9vRE+uYg8skZIOBfBXxmV94QEUzQoO9UJUQTFgNZUjQGpDhWpLgQ6B5EvXHh:a+BH8XQ6hWpLgf6XTkC8Mq5Z4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8b00f366567957157455fe77911cdb_JaffaCakes118
Files
-
0d8b00f366567957157455fe77911cdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12.8MB - Virtual size: 12.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ