Static task
static1
Behavioral task
behavioral1
Sample
0ddc6ab8a0847cc0b4b83b64180563a1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ddc6ab8a0847cc0b4b83b64180563a1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ddc6ab8a0847cc0b4b83b64180563a1_JaffaCakes118
-
Size
43KB
-
MD5
0ddc6ab8a0847cc0b4b83b64180563a1
-
SHA1
0a448a61b8c8bcbe625bf81b4413df68e743bb1b
-
SHA256
448756d275c3153713c66e09ce388fdaca79edfdae3e793d313f3a0ffa1a9f4b
-
SHA512
1c22eeea37e595f419ef0f5fc209b8d8873921d89cbc7be133b628cc710fba79119706d468494860b7db334041d99a94a43e419b7a3292caab8963fc61d919cb
-
SSDEEP
768:g07B97IQKk+cP5O5WhYVheBvsCXKt8+SLjb06vN:g29TKk+cRYNheBsCXKab3vN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddc6ab8a0847cc0b4b83b64180563a1_JaffaCakes118
Files
-
0ddc6ab8a0847cc0b4b83b64180563a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ