Static task
static1
Behavioral task
behavioral1
Sample
0dbd78a07151762d592ea49ce1ef5207_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dbd78a07151762d592ea49ce1ef5207_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dbd78a07151762d592ea49ce1ef5207_JaffaCakes118
-
Size
47KB
-
MD5
0dbd78a07151762d592ea49ce1ef5207
-
SHA1
02718f1fb12ee8e62f248d10998f90ba8824b46c
-
SHA256
d3d250270377f1f2048c4412f911e0a72b8fc38a2439987660f88b8f0fa620f7
-
SHA512
bba4671f5bdc8d54963b5f86164d7196e0bb3563ba913c935f4513d1f0512ea44ddf8b1d8a3695890470ba4c5736c4074c9b652406fcb1d5e60a04d151d0bb1b
-
SSDEEP
768:a1HHh0mVO1FIO5PwgPGBZBhFtl+BB24lyYBO43bOYRb2WHIRItHR9oUgd9/rX05f:a1HJVoFb1w8GBPtl02uyO3CYhJuIF8Up
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbd78a07151762d592ea49ce1ef5207_JaffaCakes118
Files
-
0dbd78a07151762d592ea49ce1ef5207_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PCGUARD Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PCGUARD Size: 45KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE