Static task
static1
Behavioral task
behavioral1
Sample
0db7184e7e4e6dab3e73eab0830c129f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0db7184e7e4e6dab3e73eab0830c129f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0db7184e7e4e6dab3e73eab0830c129f_JaffaCakes118
-
Size
337KB
-
MD5
0db7184e7e4e6dab3e73eab0830c129f
-
SHA1
7d717504a023e0ca86a1b7263b9ffd58da05414f
-
SHA256
feb209cfa0d1364eeac17e72a5c27f9f0f5e7c24fb52a629a655194a60e3e1c9
-
SHA512
679a069760c84d825bc04ab234e19707305762d4b8a394ac6b218fd71da914531115d23519074c5d1400c98d8f10018ebaf6c7e12c117022789c633e20c08c0f
-
SSDEEP
6144:vEsgehtRZL02vIMP6lZSoXnuUEF9GCpiQ+EX:dge3ROA9iLNX/it2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0db7184e7e4e6dab3e73eab0830c129f_JaffaCakes118
Files
-
0db7184e7e4e6dab3e73eab0830c129f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5OfZrVcl Size: - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eG9zE1Gf Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Kk9NMl0l Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FzpSNpga Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JMM5KzST Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ