Static task
static1
Behavioral task
behavioral1
Sample
0f418d2fc2720e1bbb405ac72c206155_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f418d2fc2720e1bbb405ac72c206155_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f418d2fc2720e1bbb405ac72c206155_JaffaCakes118
-
Size
211KB
-
MD5
0f418d2fc2720e1bbb405ac72c206155
-
SHA1
911b49e6869519ba83eb4c91c9d3cf73898271b1
-
SHA256
99d5ec77989003550da8ffb88fb03b39b2c7b922bf99abbd620c5dbf78d79259
-
SHA512
b7d238b4390abf2b3442dec617316b961b3be4807e0a12269b23b95d11c2061604e27bd092eae74e06fca6a10088c3308dc2fab9346c9dc9b2c023026b5ea210
-
SSDEEP
3072:vWO+g2MUIFkh2Qk8ftbN2tREvpyv071dFNlQRRe3HSMS0tqKpMsGVJZrQ+N80wE:ujKkhM+tbNpyvuhjQ3yvSVoKV3DN809
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f418d2fc2720e1bbb405ac72c206155_JaffaCakes118
Files
-
0f418d2fc2720e1bbb405ac72c206155_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ProCrypt Size: 85KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ProCrypt Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE