Static task
static1
Behavioral task
behavioral1
Sample
0df454c095dd6e578be0ab3cb843cb34_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0df454c095dd6e578be0ab3cb843cb34_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0df454c095dd6e578be0ab3cb843cb34_JaffaCakes118
-
Size
36KB
-
MD5
0df454c095dd6e578be0ab3cb843cb34
-
SHA1
0b1be56e01512fae87afea9de0e42c895ce027dc
-
SHA256
09eee2bdf6ebbb7494a1f4a5d7eef48fd6f143d65022884cb715b245ba700b7f
-
SHA512
7efcf4ffa8429538d6ce1db9d08288c5f76b711caa1026b744903192d58b662d764087ca007c9e8085fc58183380a438fbef4684ff014496c5b914546642aae8
-
SSDEEP
768:Wia5+yEWuAGZ+RSo7xi2dLiRixO0MI1AZi7boP/9hBt:D9/Ahgok2P1AMK/9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df454c095dd6e578be0ab3cb843cb34_JaffaCakes118
Files
-
0df454c095dd6e578be0ab3cb843cb34_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ