Static task
static1
Behavioral task
behavioral1
Sample
0dc3fafed0aa9c5f68b54597e6cf9555_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dc3fafed0aa9c5f68b54597e6cf9555_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dc3fafed0aa9c5f68b54597e6cf9555_JaffaCakes118
-
Size
289KB
-
MD5
0dc3fafed0aa9c5f68b54597e6cf9555
-
SHA1
1f74520ccbec8a030868b3570349bac2ecdff43d
-
SHA256
850e11c65d0531026724b8ca2ab33e1bd30457e94ca194db6a8a8995132bee7a
-
SHA512
e0dc86c7e37fef80f252477f2778fb34eac59384f2d34603d6ec8d6942b7ceaf31bdef1ba4e8c3525398dd72350461de5772ae94f3a4930d4ccdf0ad3cb9b99f
-
SSDEEP
6144:Q2J4t4HPq4xXY1PvKV6gWDNRWPNqTprVeRsCmrum4Dc:j08PlxzOsNqTbeO2m4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dc3fafed0aa9c5f68b54597e6cf9555_JaffaCakes118
Files
-
0dc3fafed0aa9c5f68b54597e6cf9555_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ