Static task
static1
Behavioral task
behavioral1
Sample
0d8c89980cd81d61f343e525cf0d4db3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d8c89980cd81d61f343e525cf0d4db3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d8c89980cd81d61f343e525cf0d4db3_JaffaCakes118
-
Size
93KB
-
MD5
0d8c89980cd81d61f343e525cf0d4db3
-
SHA1
968bac179d69a77e14a87132f585f5183e12d132
-
SHA256
305fb67737b010816d1f42f4bb749db84b23dcb53fabe62b017d146959b0e373
-
SHA512
56e582790f3cf63eb6e47ac9c7e0315e252a8c700b6d624c8b102374b0c9bf0d98b7fb6f1c7810e2f0fd2e3e25103a383101f3d0c4039942acf4d821a37a9610
-
SSDEEP
1536:NM95M7XUD5Ohz6BHvhv89xdhM1sJLvrzwVSSx45I9Xpo7nDWWhoVc9:U0Xlqv89nbJLvrzwVSS4OoDRqc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8c89980cd81d61f343e525cf0d4db3_JaffaCakes118
Files
-
0d8c89980cd81d61f343e525cf0d4db3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 377B - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 92KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE