Static task
static1
Behavioral task
behavioral1
Sample
0e64f39a54f11378ed4ff14263d56259_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e64f39a54f11378ed4ff14263d56259_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0e64f39a54f11378ed4ff14263d56259_JaffaCakes118
-
Size
22KB
-
MD5
0e64f39a54f11378ed4ff14263d56259
-
SHA1
dcaa2e2b2e850a959da788e9e32d725325c1273b
-
SHA256
c27542fafc20bea66dbf9527703908bdd9ed61784504078ad2a06a3eb231ee55
-
SHA512
55056f0872233613ac6204ffb9f982b2c4e0c55ccb2e5879d7c71455a0bd463267894f08730bfed54df4fe2bf943641c564b77231ff1fbaf8a95a0224a6b09fc
-
SSDEEP
384:K4Fsm4mMBJftnb1F8a25jFtkzdskv1OszQvhtFl/QbKeXkJbCBL340qHC8:CflsR5jQlkskvQ7XkuBb40qH9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e64f39a54f11378ed4ff14263d56259_JaffaCakes118
Files
-
0e64f39a54f11378ed4ff14263d56259_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ