Static task
static1
Behavioral task
behavioral1
Sample
0f587d95f02df1d478a61d267a99ad8d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0f587d95f02df1d478a61d267a99ad8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f587d95f02df1d478a61d267a99ad8d_JaffaCakes118
-
Size
26KB
-
MD5
0f587d95f02df1d478a61d267a99ad8d
-
SHA1
cc155ced48f3329ef31ce469a579bbbbc42030ec
-
SHA256
d9abf342946ad244c887bd9e81ce94c0376d23a1f7e0ed6be45b51c89b1a0823
-
SHA512
73f92befbd1202208be4b48b87d19ca6a8276bcc07006cd666b3b4e0f643f3fb1d576ca57b608b3bc96ecec543e469d08c376bcb575abb371d048ace87a47b5f
-
SSDEEP
384:kbghE92/YnilvVcKPAr9qYtURpU+U7GJC8pJ+HTGzfEFi8gAi1Wnp4GUh1:vEU/YnilvmKG9qYtRvxTGzEFi7A2oE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f587d95f02df1d478a61d267a99ad8d_JaffaCakes118
Files
-
0f587d95f02df1d478a61d267a99ad8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ