Static task
static1
Behavioral task
behavioral1
Sample
0e03a21b4378c130d620df66ba67ed13_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e03a21b4378c130d620df66ba67ed13_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e03a21b4378c130d620df66ba67ed13_JaffaCakes118
-
Size
800KB
-
MD5
0e03a21b4378c130d620df66ba67ed13
-
SHA1
42caaf16fcbbef0b346850df46498dd08b315a5d
-
SHA256
a26d2464e0d349df18e4d5fe2c640b26be8439bd5d18b9c2c2aff4ac2a59ed4d
-
SHA512
4eb9f1cbc5a7954bef3b03184bb8728253a083b31978ce63b6303781c7187b96331e562f803a74950af795ff81e5574f8277859a4c81c042a305c0b34476a382
-
SSDEEP
24576:IdBvg2itaayu15gRZLaXNySf0OPc9+kLP9tNoQ:Ifvg2ZNTRJeNYOk9++tNoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e03a21b4378c130d620df66ba67ed13_JaffaCakes118
Files
-
0e03a21b4378c130d620df66ba67ed13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 76KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE