Static task
static1
Behavioral task
behavioral1
Sample
0f82bf362582db1a41123d0b23424361_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f82bf362582db1a41123d0b23424361_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f82bf362582db1a41123d0b23424361_JaffaCakes118
-
Size
22KB
-
MD5
0f82bf362582db1a41123d0b23424361
-
SHA1
ef72a17775af0a93ef68a8c7f115b1f223ffb3b6
-
SHA256
13b9eecd74fa42b650096191421c12150ca48afb395a37014cf43457158f33f1
-
SHA512
4dfd08b55880724e9add180bed918893672b3f37f9bf5784c72d317545e4582477a7e58fa926ccd072b0b036b7b8f7f51dea9fdadb4026abdb1174ca633fc6bd
-
SSDEEP
384:erAN0EfhD/oWsCgD6EVEjeUJjEyRaL0QxSBPJl/lGTT4yhGdAd0g8Sp9A7:QAz5gD64s5JjlRagQxSJ44w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f82bf362582db1a41123d0b23424361_JaffaCakes118
Files
-
0f82bf362582db1a41123d0b23424361_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE