Static task
static1
Behavioral task
behavioral1
Sample
0e14e385d1545de43646e81dbfaef985_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e14e385d1545de43646e81dbfaef985_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e14e385d1545de43646e81dbfaef985_JaffaCakes118
-
Size
755KB
-
MD5
0e14e385d1545de43646e81dbfaef985
-
SHA1
638e27e0a3940fa701411967b7fc2d551c373f03
-
SHA256
5bfbc2e686a57ca76873294b70d6fdb21a3a0ee13706100b1018266f2acb7c3c
-
SHA512
7c128942725f208ab2f37487872b76d6ce6ba053b0006d1728afcb5196310f18d5ab1bd8cedd9050901b7e1f08179f3a32c9c751d6c6121ae4f9c56c48e8c70c
-
SSDEEP
12288:5Yl6xlkV1BGdOjXv4zJ7WDSGzy8K0RYZlDKe01lPO0:a6xlkVbGdOzOi1zy87mDWr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e14e385d1545de43646e81dbfaef985_JaffaCakes118
Files
-
0e14e385d1545de43646e81dbfaef985_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pav Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE