Static task
static1
Behavioral task
behavioral1
Sample
0ebabc04378c995616c504adca6b57b3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ebabc04378c995616c504adca6b57b3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ebabc04378c995616c504adca6b57b3_JaffaCakes118
-
Size
828KB
-
MD5
0ebabc04378c995616c504adca6b57b3
-
SHA1
2a6c6e11ecb4f54a43055e141981054665198fed
-
SHA256
74792c0a28d5b2d95973c0318689ac17ca6b16473e8af9ef62c625289cdbc24c
-
SHA512
510876f41f2bb01d809d8429dbbe33c75eca9efcdcf583e523c667bde2160ca013d2c17c3739c9dfb848040826797d6f8d36a85c257e3bb27bbceac3781e130b
-
SSDEEP
24576:7o5KbdcwoUAGASgL7YsjeEWY10GWSe4k1/CsuMnqBc6b:7o4bdcKgL79dz1Ne4k1/5nS7b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebabc04378c995616c504adca6b57b3_JaffaCakes118
Files
-
0ebabc04378c995616c504adca6b57b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 827KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE