Static task
static1
Behavioral task
behavioral1
Sample
0ddf701118426132ed0b0c460dd09376_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ddf701118426132ed0b0c460dd09376_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ddf701118426132ed0b0c460dd09376_JaffaCakes118
-
Size
1.6MB
-
MD5
0ddf701118426132ed0b0c460dd09376
-
SHA1
fa8f7cf3366f4b6b7ced3f2d962d1fadadefe1c7
-
SHA256
d2da84f8b5450c6b46f2ff62a616e788e465cb4dff22a20e8c33a3ac8d678c35
-
SHA512
482d93d064df6c2956cdf727613d8b44979933338fb6aef076d0d75c80a85c0f4a112de9f468b1756b3046b5ff5d61794266f48975674086912be15f2070ec86
-
SSDEEP
49152:XYaIgwV9ABpvFjSRtHhMWyZNKEq6czGsuCsQPi:XrI/zABzmRtHhMW8NKHzGse
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddf701118426132ed0b0c460dd09376_JaffaCakes118
Files
-
0ddf701118426132ed0b0c460dd09376_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 296KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE