Static task
static1
Behavioral task
behavioral1
Sample
0f3290082bfcf34eea9fb4224e371ddd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f3290082bfcf34eea9fb4224e371ddd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f3290082bfcf34eea9fb4224e371ddd_JaffaCakes118
-
Size
21KB
-
MD5
0f3290082bfcf34eea9fb4224e371ddd
-
SHA1
e4ad87128781d13e44bc82528f08e790a639163b
-
SHA256
f805103b0fb7ce54a9b3889a60307b4228e40de7d0676a1816e68fb7dbb035e6
-
SHA512
4ad59fd8cd621880d202879214c74777ecb7a3acc76e037d9105850f729438eace43fa5fb9a9080c5800cd3c0541f73c934448631d63b9a14a5f3c0c049cadea
-
SSDEEP
384:MNpdwB0eJwdAhXSbZ1PdrAY/e9VZeNzG1hAzqU0sn35Qy4jKIfH8:MNpdHDdAhEleY/YeNzG1yie5Qy4uI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f3290082bfcf34eea9fb4224e371ddd_JaffaCakes118
Files
-
0f3290082bfcf34eea9fb4224e371ddd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
V�%8�� Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�����) Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE