Static task
static1
Behavioral task
behavioral1
Sample
0e606dcda48a6545665ed64be133c450_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e606dcda48a6545665ed64be133c450_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e606dcda48a6545665ed64be133c450_JaffaCakes118
-
Size
4KB
-
MD5
0e606dcda48a6545665ed64be133c450
-
SHA1
e3dff4fdda5d24ce5c14850f9836da995edc7456
-
SHA256
02c74272cfc446b5fbb7db674b959a2e0a5689cd0d4dde0cc79a504d210af4ef
-
SHA512
4c78652a35ebfd6fa454d78a7b7df58924d0a19cbac1b44fa7dae0b6e3ecc482856e6b13a611329ae37c9c0ecbef3b694ff7842d8fdb53d5e86d466103a1a016
-
SSDEEP
48:R0TLmZspEhSt2iZsgUccGniwRyVttTvZA4yC4NkJZ+J29WAlCSHKKAgB2DpMe:wLUhfyOGn7gTi4yC4mew9WMCGAg8x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e606dcda48a6545665ed64be133c450_JaffaCakes118
Files
-
0e606dcda48a6545665ed64be133c450_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 244KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA