Static task
static1
Behavioral task
behavioral1
Sample
0f4f8a60e548e5a4c02418fe4d0644d4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f4f8a60e548e5a4c02418fe4d0644d4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f4f8a60e548e5a4c02418fe4d0644d4_JaffaCakes118
-
Size
34KB
-
MD5
0f4f8a60e548e5a4c02418fe4d0644d4
-
SHA1
bc0eaac5778df6767279027b35706b2e9aceacce
-
SHA256
421d14f8ff590f59a7179ddd34230cba90c44a57a2fdef6cad37accd20075f98
-
SHA512
0f0a291c4f6f89541aed946e8ebafc070c848db4d75ca7281a1c8d1227ada5b8f6ea28e5f83f3352cd509a533e31927273b7171066609dea2225edac0d0f83ce
-
SSDEEP
768:S/RYSfokd/bUAJ0lnOS9cBc6yaw+NhqngVD4Ko:S/m7kd/ZJ0lOUce67wCICq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f4f8a60e548e5a4c02418fe4d0644d4_JaffaCakes118
Files
-
0f4f8a60e548e5a4c02418fe4d0644d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 497B - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 34KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE