Static task
static1
Behavioral task
behavioral1
Sample
0ee90dcbd68bc37e9f1f7a6324f2c831_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ee90dcbd68bc37e9f1f7a6324f2c831_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ee90dcbd68bc37e9f1f7a6324f2c831_JaffaCakes118
-
Size
34KB
-
MD5
0ee90dcbd68bc37e9f1f7a6324f2c831
-
SHA1
218c66c17f98813235c1cc70b6f1b9f5e20324a1
-
SHA256
4b2e9807737f9b40fdb99a8e4124ed0131e0d4c22997defcea69da21222e7aaf
-
SHA512
0201ae04623b7fffefd43c183372ea74edb7a41ac7751ca7003e162a724af14a009039aa86156e852bb0d7465e8882000cbad025b32951195e71e2858bffa768
-
SSDEEP
768:AgPP508lkxZLZruUrYyN1pOLGwFq4u0vt:AQ58ZpNsyNcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee90dcbd68bc37e9f1f7a6324f2c831_JaffaCakes118
Files
-
0ee90dcbd68bc37e9f1f7a6324f2c831_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE