Static task
static1
Behavioral task
behavioral1
Sample
0e732bd532da07da61378bdb1c2a848d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e732bd532da07da61378bdb1c2a848d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0e732bd532da07da61378bdb1c2a848d_JaffaCakes118
-
Size
372KB
-
MD5
0e732bd532da07da61378bdb1c2a848d
-
SHA1
1f733661f54490c0da4a6fc0336a14c3eda751e5
-
SHA256
a4c25d6e410f58b7e22bb8ea94440d998419a1c1b4a45688537da091ba26cf0b
-
SHA512
d074f758053cab55d6cdd8ba9e0a64e1356f3ceb6f16797613011a91ab7745b1596ff158bb3e7fa6949f3b29bac339d2387f23dec4df0c261ab6c89c78e94154
-
SSDEEP
6144:9EF2idZecnl20lHRxp3g1ncduD7yB9VCO6Sco4q8+dE6CqI2CRqgHV/V0hEK:9EF3Z4mxxaDqVTVOCM/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e732bd532da07da61378bdb1c2a848d_JaffaCakes118
Files
-
0e732bd532da07da61378bdb1c2a848d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE