Static task
static1
Behavioral task
behavioral1
Sample
0dd8674046f4c4dd1d8b63188638606d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dd8674046f4c4dd1d8b63188638606d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dd8674046f4c4dd1d8b63188638606d_JaffaCakes118
-
Size
380KB
-
MD5
0dd8674046f4c4dd1d8b63188638606d
-
SHA1
760247cd4fc3aff2e88a9401bedeefd74e15e7a3
-
SHA256
c8c3aa640dc1d3a0cd94c34802232c5bcda6fca7c088a29f7298168f05d45914
-
SHA512
8912e756af8fb13b4bd93694fed3b717678d75798dc591651ae082ab38e865043e76fbda5358b529c6c6e45229e61a237262239905b3e57ab6a4e0af8ba614b6
-
SSDEEP
6144:98VCiP0IqC96vGvevMVQE4keUTwatztaPixt/h/UE3WT2tEUX74YH:+cI+GvkchQ+wqz+ixtJ8E3Ws/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd8674046f4c4dd1d8b63188638606d_JaffaCakes118
Files
-
0dd8674046f4c4dd1d8b63188638606d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ