Static task
static1
Behavioral task
behavioral1
Sample
0e686fa6ae5b946df4dd4c004c4e3200_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e686fa6ae5b946df4dd4c004c4e3200_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e686fa6ae5b946df4dd4c004c4e3200_JaffaCakes118
-
Size
528KB
-
MD5
0e686fa6ae5b946df4dd4c004c4e3200
-
SHA1
7d5e1c36329a3bb32141aff37ba8a0125b20ec43
-
SHA256
3dab75c17d6a9b4d261e45a546e73439bda3e70f38cff1e672549741695a4bd7
-
SHA512
17fcb55e4e9e35ea706dff26f29cdb956b21a6c67b82632d8ed64621738d21be984312287642d6e0d4b8274218a05c537eec5bdb65ccfd44be0705a5ee057ef7
-
SSDEEP
6144:M4W/gxwTS8SZD/eNCvz1oDASFJ5wQimcC4YS3yX:M4kgxn6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e686fa6ae5b946df4dd4c004c4e3200_JaffaCakes118
Files
-
0e686fa6ae5b946df4dd4c004c4e3200_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE