Static task
static1
Behavioral task
behavioral1
Sample
0f6155b74308ffe06c0f17ff55b7d936_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f6155b74308ffe06c0f17ff55b7d936_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f6155b74308ffe06c0f17ff55b7d936_JaffaCakes118
-
Size
79KB
-
MD5
0f6155b74308ffe06c0f17ff55b7d936
-
SHA1
95d7e12dea01a457bc96f0d83d644ed410a2038a
-
SHA256
4287b28e2f4b1953f34dd6be707a5218844934281840ee73d4f2296f1a4ec3c0
-
SHA512
b829ed28246336a3fda3ef01234bbd38be437588c2cf69a15e5e50d67ea10a6bdff396b74db8306be5453748c1b5228d9f2bebf58d8ecc5f060f7bf8282512a4
-
SSDEEP
1536:97uAQll3fYWWbLijmz7buqFuA/E+FifgTeO:9aAQ7OT7bLj/35eO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f6155b74308ffe06c0f17ff55b7d936_JaffaCakes118
Files
-
0f6155b74308ffe06c0f17ff55b7d936_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ