Static task
static1
Behavioral task
behavioral1
Sample
0e0ed62f7b9e2bd514975808e06a298d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e0ed62f7b9e2bd514975808e06a298d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e0ed62f7b9e2bd514975808e06a298d_JaffaCakes118
-
Size
305KB
-
MD5
0e0ed62f7b9e2bd514975808e06a298d
-
SHA1
8c3e81e63216c25d245a3d42bb0bce565c41fe52
-
SHA256
08519edc4326e639cc49139c16c0dc820960971f4e6632c0837631e575829d02
-
SHA512
a36ac672f73f3eb98cd75731da4d0ce993f38075ee346dfdf3129b9559a11193ce033af9eb36a141e33d0cc826e8f51e91bb0ac6146da0c9b6a37839818ed3c9
-
SSDEEP
6144:E9UfckH8PcoYvMblj7wRWhjtpMUpb9/xERA6vNkf69GqaVq:UNkHEcBMJj7wRZUb9/UNkRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0ed62f7b9e2bd514975808e06a298d_JaffaCakes118
Files
-
0e0ed62f7b9e2bd514975808e06a298d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�8�0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�8�1 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�8�2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE