Static task
static1
Behavioral task
behavioral1
Sample
0de9fc97f24ba65258b267a06eb7f457_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0de9fc97f24ba65258b267a06eb7f457_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0de9fc97f24ba65258b267a06eb7f457_JaffaCakes118
-
Size
272KB
-
MD5
0de9fc97f24ba65258b267a06eb7f457
-
SHA1
e146bde0baae4e60c1f228d630293d7c5d68cb3d
-
SHA256
7fc4742bb2f8e55c85e9294c2ee8e9d73b542ca4ceeb4194ca56b5d301d50fbb
-
SHA512
e75b3abd78e77088633d7ed49ae5d373a3bcc3652118dd380b1fb1c28f5deaa9f2dea427f1e8e4e27c202c71175fb9a37e3a0415d20db48163945e96f74bd059
-
SSDEEP
6144:rSsgeRpzQSE7MxMd0v1EKMsHleE8wUVrQ:rSsgeRVxEIxe0vRHCwarQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de9fc97f24ba65258b267a06eb7f457_JaffaCakes118
Files
-
0de9fc97f24ba65258b267a06eb7f457_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
npA08bSO Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BgvNz8H3 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TEVHb4qI Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qNzFI0lN Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A6ErZ6Qh Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
A6ErZ6Qh
-
BgvNz8H3
-
TEVHb4qI
-
qNzFI0lN