Static task
static1
Behavioral task
behavioral1
Sample
0dd6faa24c82226f00e01f2530050cbf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dd6faa24c82226f00e01f2530050cbf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0dd6faa24c82226f00e01f2530050cbf_JaffaCakes118
-
Size
274KB
-
MD5
0dd6faa24c82226f00e01f2530050cbf
-
SHA1
9dd32f7a3ec43603ed06443f95a93dbb1773c394
-
SHA256
6cd1bb27d4b1e682a16a8c320aad18d71d1fb6875aeb47e377aa29834a58c031
-
SHA512
c6a1029e7655040cabd1fb37e74f71f23af7c038a7e41a876db4070ab5001630b6dbd43b38b25720fe3dbfc9de6d749c942b71318e382e89c5662aa4042e3940
-
SSDEEP
6144:76YajbofxCv65qBd4VLfkhx8zX1POeUXY79f41Jr:dWfdSLfkh2zXDJGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd6faa24c82226f00e01f2530050cbf_JaffaCakes118
Files
-
0dd6faa24c82226f00e01f2530050cbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ