Static task
static1
Behavioral task
behavioral1
Sample
0f8a3ea31b2a2eadcba11f382564694a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f8a3ea31b2a2eadcba11f382564694a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f8a3ea31b2a2eadcba11f382564694a_JaffaCakes118
-
Size
324KB
-
MD5
0f8a3ea31b2a2eadcba11f382564694a
-
SHA1
67b1a1245c282b8b50eb4ccb9c9f3fd9232ae1f7
-
SHA256
3bf84f7d6a96129ec4937dc8ea057f15e4e69a13910a9e69e40311190802abfe
-
SHA512
2f110d5a57139223c190a2ba33f7334d9a36d1ddfa54f734cf83e3d3428c0a7cc9121bd9b430575af0be966884c893009348c4fa59af0a8f215db3202fe27c12
-
SSDEEP
6144:Z6f1GFMu0NFg7a+QA8UEbgjXVehj+VaFOYu76HT81XUEa9NrnTSvOyj0uP1:kGFMunW1gjXV7y27uT81XUE6exPP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8a3ea31b2a2eadcba11f382564694a_JaffaCakes118
Files
-
0f8a3ea31b2a2eadcba11f382564694a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
AviraS Size: 9.0MB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uckk� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bravus Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Satyr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 288KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE