Static task
static1
Behavioral task
behavioral1
Sample
0e0c72919521295552da546959264904_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e0c72919521295552da546959264904_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e0c72919521295552da546959264904_JaffaCakes118
-
Size
711KB
-
MD5
0e0c72919521295552da546959264904
-
SHA1
a47de275fefa9706a71f8167060d203564f0fd2e
-
SHA256
5b0d21e1d6649acdfab3458674b27e302396eb16b032e0c90045d3a1abaabaa8
-
SHA512
650883485808024c5e1561826c39a9fcad8d6aedbe8f8f166456d50a7189c2dc3dccff58888f4868e7385c3e2846a9c08551e2eefaf3832d3ef82e16b7af077e
-
SSDEEP
12288:Vm3yH2a6ZddK6J8y2aDWHX61t9VktnrR5rFgMW7V7kw0IRwOqh7H2b7Pjqu:M42a4BJ8yzOK11k/rFgMW7V5UO87HgP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0c72919521295552da546959264904_JaffaCakes118
Files
-
0e0c72919521295552da546959264904_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 575KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE