Static task
static1
Behavioral task
behavioral1
Sample
0e97a5c8534835721eb111549339530d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e97a5c8534835721eb111549339530d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e97a5c8534835721eb111549339530d_JaffaCakes118
-
Size
344KB
-
MD5
0e97a5c8534835721eb111549339530d
-
SHA1
ad6cee97054dac4fbbf4352a2a2938a2e063d364
-
SHA256
b4b31161abf7080cf0a18a80d63d7424d3c50cce6766d531bd3a0b3e3047dbd7
-
SHA512
fd467bae2f3cdf754c2075deff6a7c5969c8949977c11692e7dc7bc55d8172882e4543a6bc6cd8def491587b3697de5de2c1a3e43c3a4055b007f9a99fb8e10a
-
SSDEEP
3072:6vJYHO6cquY6PzInU3e3Du3fqFnrJYWOi4VQ2VSgkKDf3tfBHgXz7JOkiyxR:C6u6NupPz00sS3f7WOieQ2VSrw9wEg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e97a5c8534835721eb111549339530d_JaffaCakes118
Files
-
0e97a5c8534835721eb111549339530d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE