Static task
static1
Behavioral task
behavioral1
Sample
0e233ca8b244bfed076ae5be2887bda5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e233ca8b244bfed076ae5be2887bda5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e233ca8b244bfed076ae5be2887bda5_JaffaCakes118
-
Size
89KB
-
MD5
0e233ca8b244bfed076ae5be2887bda5
-
SHA1
8b66317585805da752c755ba150869353d9efb09
-
SHA256
421b316156da475e5041936a128cfa1ea904c53f295aa5003a04fec94b586d38
-
SHA512
5a82ec3ff0f038c9027143b97ff2c921708bbb8d1b6f19e95f9e3a00acb07b159b19281375d904ccf334ae6b4a383da5f54b414b7c802f8a2ad560003d901666
-
SSDEEP
1536:UzLZdaxHC5LXPNt7GhjhVL7Vf/8F3I8sm288rlvvG82juIQTnPPjYjhVLI:aLZdaxHC5UhVL7VMbsNrB6mTnPPKhVLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e233ca8b244bfed076ae5be2887bda5_JaffaCakes118
Files
-
0e233ca8b244bfed076ae5be2887bda5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rxghky Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fslrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u8w7loh Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE