Static task
static1
Behavioral task
behavioral1
Sample
0df619a3ea4d45e7c11382682858917e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0df619a3ea4d45e7c11382682858917e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0df619a3ea4d45e7c11382682858917e_JaffaCakes118
-
Size
92KB
-
MD5
0df619a3ea4d45e7c11382682858917e
-
SHA1
38dd2d057879c0ff788a51f2a7d756e4f2ac96dc
-
SHA256
d6011b2482dcbed25b1767def8f3258f1d52fb977e196006dc7e3e4d33683538
-
SHA512
eca756ebbad65232ec1146fbe1a06d4281a4a1e38df5a510726d2bdb47ba14ea017903d5f1c78c5c960fe153047c5f2e314cc7a60bd40f8815ef94f56db6596c
-
SSDEEP
768:tpWmqlVaeQM9sP2bfeWYUZm1X5ZxmqB0U7fEol+j2scv30PVXEWziDogxjQHt:tEmqldQMKeWmeZJLr82sPVXEUiDxx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df619a3ea4d45e7c11382682858917e_JaffaCakes118
Files
-
0df619a3ea4d45e7c11382682858917e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Cxk0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Cxk1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Cxk2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE