Static task
static1
Behavioral task
behavioral1
Sample
0e71901beebedadd154c10607edfb86f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e71901beebedadd154c10607edfb86f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e71901beebedadd154c10607edfb86f_JaffaCakes118
-
Size
9KB
-
MD5
0e71901beebedadd154c10607edfb86f
-
SHA1
46bf1567ae34e0bd3d9085aef001846babe6cdb7
-
SHA256
c38fd292f980b9f8647079673e1d1af8b0f5bb4246a24d55aa65b38b46db9ed5
-
SHA512
926f293f83c04139a7fd5d2507cd09c2be9ce0ec0710d629f8de3bc763b40e5ed31e8ef75fc78db0e5d1497d3b713b03e93a5618bd67b952bc53ccbffb4a5635
-
SSDEEP
192:ncv+3G2pTW6BF9WCSRKmdi4umwGIP9mwPi:nY+3GqFVSbEmwGqna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e71901beebedadd154c10607edfb86f_JaffaCakes118
Files
-
0e71901beebedadd154c10607edfb86f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kylin Size: 1024B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE