Static task
static1
Behavioral task
behavioral1
Sample
0f0e0475249472408e0a0253fb61059a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f0e0475249472408e0a0253fb61059a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f0e0475249472408e0a0253fb61059a_JaffaCakes118
-
Size
43KB
-
MD5
0f0e0475249472408e0a0253fb61059a
-
SHA1
c81a4dd0b6bd41947f84f737bd02659a37c754bb
-
SHA256
8994634f29601e443b00ad5cb4f3e7ef9b5d9ee2c114e419037cc48d026b481f
-
SHA512
44aad16ed354957064fd70b505131b140218f1c7964582ead261adf91cd48d29b489eea27fb73a01def7165516caecf180509fa95deb892c5b95ccf6e959de50
-
SSDEEP
768:wOr6PrP+zSpXKg/7vuNdaDxK5qVvx+th8yvRe75y5jZe:fCrP8Sp6g/7WNdaoQJSCyc4jZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0e0475249472408e0a0253fb61059a_JaffaCakes118
Files
-
0f0e0475249472408e0a0253fb61059a_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ