Static task
static1
Behavioral task
behavioral1
Sample
0f6c15ba47eae2d9f67a797f8fd2990e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f6c15ba47eae2d9f67a797f8fd2990e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f6c15ba47eae2d9f67a797f8fd2990e_JaffaCakes118
-
Size
21KB
-
MD5
0f6c15ba47eae2d9f67a797f8fd2990e
-
SHA1
ddfe95e22b38ec59442287074670bf7cae318bba
-
SHA256
06d1b5b48d2f1d81c1fbc1625cd6ff53a618fc4be341b33cb85f21936dd743c4
-
SHA512
32b65eb1384b2e7b4dca193cd528945fddad48cab64f725b4d9ea07b53d15fac09c5d08327edeea9d609664a68351c59dc0c1c39174f9da8ce7429092de865d9
-
SSDEEP
384:q7u7WlZxC89yKrDjoDkoxPyRRcbtBgTWvo+Yl0YAJgxeiVTd:f7WHxnnj0koxqQzgTWv3HJIBVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f6c15ba47eae2d9f67a797f8fd2990e_JaffaCakes118
Files
-
0f6c15ba47eae2d9f67a797f8fd2990e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE