Static task
static1
Behavioral task
behavioral1
Sample
0ea56baab28fdcecb94cbcc5f72b6aeb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ea56baab28fdcecb94cbcc5f72b6aeb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ea56baab28fdcecb94cbcc5f72b6aeb_JaffaCakes118
-
Size
480KB
-
MD5
0ea56baab28fdcecb94cbcc5f72b6aeb
-
SHA1
4b2c8d33a616590bce477ecc8cc8cbca45e751cf
-
SHA256
72b3ee97bbaca60c3b27d6d6ec5aec10eaf316269db5e5c5ff1aae730bba57fe
-
SHA512
e2be29ecf001ebeff3a38bbc767b859e56897a6897fb913da3c587f345b8dc71365d48f6b9839b6d94fd54464649689d48aa3a11bb5a6d01cb25f62cb9ebf785
-
SSDEEP
6144:7djn/FlVBfK+LaFrB9MbpIBxdqXFnqC+AMG0TONUeCI6VHbhdm6CfWMl5d98uoSX:7dL/F1y+WFr/Yert6QrdMhfWgBoScs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea56baab28fdcecb94cbcc5f72b6aeb_JaffaCakes118
Files
-
0ea56baab28fdcecb94cbcc5f72b6aeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 418KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE