Static task
static1
Behavioral task
behavioral1
Sample
0d8b73c243b446311fd96045c0b14309_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d8b73c243b446311fd96045c0b14309_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8b73c243b446311fd96045c0b14309_JaffaCakes118
-
Size
631KB
-
MD5
0d8b73c243b446311fd96045c0b14309
-
SHA1
3bc318733a6cfc84ca061913431b9daacec47990
-
SHA256
6af2ed275ed39e44df913288b5bef9d548ed87e2e71ae2a9ae5f507b44d1db0f
-
SHA512
0423a77300418164efcf53ee059a3e320c9ca35b9ec3e114be44c6b5e52eb5cb36481691bcd7e88502a7a53bcc5e0e1632b12577bd158c8acaeffa9f5125eb02
-
SSDEEP
12288:Xd5i+6hH2g8+isBb/tv5fS15DnXrGpeQliMNqPVzcpdtlUq1c2obY7JZWNI3CuR6:N5i+6dQ+i8RfO57SqP6pDW4ocyY2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8b73c243b446311fd96045c0b14309_JaffaCakes118
Files
-
0d8b73c243b446311fd96045c0b14309_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 368KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE