Static task
static1
Behavioral task
behavioral1
Sample
0d9791cbe34a313cb11b1c2a1962e526_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d9791cbe34a313cb11b1c2a1962e526_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d9791cbe34a313cb11b1c2a1962e526_JaffaCakes118
-
Size
140KB
-
MD5
0d9791cbe34a313cb11b1c2a1962e526
-
SHA1
ea138b2acdc17e175164c9f70cb855ed6fe7a8a3
-
SHA256
669f74f8cedaad91df04d414884d7a0801c76b49a7200b21db1a00352816637f
-
SHA512
51a18426b59e33c7c1cd44981f285e1a88377b5c7505e285e0106c7df451b4538df0548a39730253727c963a466b5b24996fefc7a6b081fc2a88efc0d6348476
-
SSDEEP
768:NMHhJJJUsrt0t+qZ83dbcg8EunDFUiifd/q:2HXUMWAOguBUikdi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9791cbe34a313cb11b1c2a1962e526_JaffaCakes118
Files
-
0d9791cbe34a313cb11b1c2a1962e526_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE