Static task
static1
Behavioral task
behavioral1
Sample
0db5a752520250a7f03eb229a6cbcd0c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0db5a752520250a7f03eb229a6cbcd0c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0db5a752520250a7f03eb229a6cbcd0c_JaffaCakes118
-
Size
84KB
-
MD5
0db5a752520250a7f03eb229a6cbcd0c
-
SHA1
4962de83831c829ba37661b6feaaffffafee9ad2
-
SHA256
c1471eef806f31dd3f974f87b75d52e5c8c33efc85e9f44add95b50c01779228
-
SHA512
84e21779a9153af97f71a5b0892d762a0667e27cfc7c01e013927a40faa9685fce4c8e7dc4db2fc817aa178f21a073d832cbec1468e23c243754bfd344d8362e
-
SSDEEP
1536:4B3LgcgifMPvITVm2BzC4xEPhE3pDDh7MhWW4K6ZK5xXTuvMPEqEr9:mLHxMP2m2gEVNcWW/6Kh8qS9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0db5a752520250a7f03eb229a6cbcd0c_JaffaCakes118
Files
-
0db5a752520250a7f03eb229a6cbcd0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ