Static task
static1
Behavioral task
behavioral1
Sample
0e75e43e6e0b297c74d7bd50b0abb911_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e75e43e6e0b297c74d7bd50b0abb911_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e75e43e6e0b297c74d7bd50b0abb911_JaffaCakes118
-
Size
55KB
-
MD5
0e75e43e6e0b297c74d7bd50b0abb911
-
SHA1
f9ce3e26d3dedc8935795ca8139733107ee77c84
-
SHA256
a6ccab3c4d80a437b2ffe58165af0706fbd20405e217cc62cf9f82fa114eae6a
-
SHA512
19d12af96cb6b5d51445b0d1054567f24575dbc3febff18f1d287f84bf4cb1279fb90f2976a49b08d7a51eba65b87c17b2156c5ef6285512a359df9c18634a95
-
SSDEEP
1536:QTRUdJsoL8cz07o+OJiLyERsSEXCDtk4H:QTSJsoL9zDJsRFUCDS4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e75e43e6e0b297c74d7bd50b0abb911_JaffaCakes118
Files
-
0e75e43e6e0b297c74d7bd50b0abb911_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
caonima0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
caonima1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
caonima2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE