Static task
static1
Behavioral task
behavioral1
Sample
0f0d68b071a9491ed04c40570d96f8d5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f0d68b071a9491ed04c40570d96f8d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f0d68b071a9491ed04c40570d96f8d5_JaffaCakes118
-
Size
236KB
-
MD5
0f0d68b071a9491ed04c40570d96f8d5
-
SHA1
202feb889c0a0032fc6f80a7a59ff3865f28e4fc
-
SHA256
fecdfab1ff062a496be56c3d699dcac2baa0f7bef0516fabeab61fff4102a34f
-
SHA512
c8bd26ec3f4848e1a4ef6e49dc3dad68f4a7137a35756b817ef30107f9ee841db7913f854df9d5674c69c7fbaa668bc8caa909a26f45bd376983af7375f2e814
-
SSDEEP
6144:wIlsscR1FWM5CP0vZwT+vtDETTq7xPRU3P:wIYR1FWbiwT+vKaNPRWP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0d68b071a9491ed04c40570d96f8d5_JaffaCakes118
Files
-
0f0d68b071a9491ed04c40570d96f8d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ