Static task
static1
Behavioral task
behavioral1
Sample
0ef8053451b88b2321525b896c49c043_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ef8053451b88b2321525b896c49c043_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ef8053451b88b2321525b896c49c043_JaffaCakes118
-
Size
42KB
-
MD5
0ef8053451b88b2321525b896c49c043
-
SHA1
c9a68978193fa771383d8420d72aebbe7e578deb
-
SHA256
5ee436029b6169438c9faa0e4a6205df6cb340b73ecd3744089ea6671b77b059
-
SHA512
49beb4f64ce6ef46a24f991e8c3bd1df1f1485d9446b5137b6cf07b425ce511615534bcf7840075ed41f0318e4789ba6b433d38dd0ed1c9f86d7cc774c98f44c
-
SSDEEP
768:XvQB0ESOGg1UrYShAbgrrLo98l4yOoBD0ANhhY/lEl6IhGUV96AJiqgn:XvQBeOGtrYSSsrc93UBIfdC67m6AJiqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef8053451b88b2321525b896c49c043_JaffaCakes118
Files
-
0ef8053451b88b2321525b896c49c043_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsuarc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE