Static task
static1
Behavioral task
behavioral1
Sample
0dcaa4b016f48d57783c0112d5c51160_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dcaa4b016f48d57783c0112d5c51160_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dcaa4b016f48d57783c0112d5c51160_JaffaCakes118
-
Size
624KB
-
MD5
0dcaa4b016f48d57783c0112d5c51160
-
SHA1
31c6fcc6a3c62952a8207f0f5ff14d0e0a2017b0
-
SHA256
dcaaac9a376f38ca0567549b07b2c1700014e75fc8c1395843830a99ecfedc94
-
SHA512
f16f882856769f6e113e90fb5da959e35be002cd356e1bc220b55d1d91da31f0b420437a871ab24969eb229c5807d53ae8262f78150ebe533341279c397d8820
-
SSDEEP
12288:7Ee/dYVMvHQOYqaexgeOvkTcUwuBYenP0RUd18ime0YpFVC0Z3StqTug0:pqMfdHGa1DB7PL9mpYpDdiV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcaa4b016f48d57783c0112d5c51160_JaffaCakes118
Files
-
0dcaa4b016f48d57783c0112d5c51160_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Zaab1Mbz Size: - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
98kAX8ua Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
gwAYSqfO Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OS7gDbQZ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uOmvkjrw Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ