Static task
static1
Behavioral task
behavioral1
Sample
0f8b7ea8ec2be40ec8a220f68f0c3f43_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f8b7ea8ec2be40ec8a220f68f0c3f43_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f8b7ea8ec2be40ec8a220f68f0c3f43_JaffaCakes118
-
Size
230KB
-
MD5
0f8b7ea8ec2be40ec8a220f68f0c3f43
-
SHA1
35a87a2e133533b7c69f8b4228756aaaa398ef68
-
SHA256
60f15389f2f3f1369917889110ef91d5a3422faa5aa644b15d0389d9c118b19f
-
SHA512
b85634148ea2ed066db8138f55c73644be134bd472af9a89db99590d23092c500b562121fd98d4fc327aa941a31682bd6bf6dd0f769b6c6fff2d996a1ef9ef48
-
SSDEEP
6144:cEs06X4l1k4pO7LoM3uGH0JQSSYWHSP1fGboqeNF6R:cE96Xt/CCP8fGblA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8b7ea8ec2be40ec8a220f68f0c3f43_JaffaCakes118
Files
-
0f8b7ea8ec2be40ec8a220f68f0c3f43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 230KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE