Static task
static1
Behavioral task
behavioral1
Sample
0f83e17b0d047fc8e8ca6e54986ed1db_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f83e17b0d047fc8e8ca6e54986ed1db_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f83e17b0d047fc8e8ca6e54986ed1db_JaffaCakes118
-
Size
475KB
-
MD5
0f83e17b0d047fc8e8ca6e54986ed1db
-
SHA1
3bf5d6abbb459e5c30bf0075de23b56781a880be
-
SHA256
8ced6836a22b3a2f4792dcd813e4b89a5ad505aab305b6b4e444ef3c3d589ae0
-
SHA512
5dbb1eac886d1b19a84cfcb3d0f6a4113ee8a1c870f857c809393954a7b8ad8a81172335faa4bac8eaf2c164c21b506af84b739203d16ed55edf0738e9e3c1f8
-
SSDEEP
6144:6ylpvLwwWFQZr1UHoVNRP61MDyUPi4G+s66a0HKxta1hfFHzDThPGlohPc:awWFQZfg1MDjPpG+s6Ba1htFP9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f83e17b0d047fc8e8ca6e54986ed1db_JaffaCakes118
Files
-
0f83e17b0d047fc8e8ca6e54986ed1db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.xvr49k Size: 1KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uu0i8h Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mkhsa3 Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ixizw3 Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdcwk3 Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.irt35k Size: - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mxp54u Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 469KB - Virtual size: 472KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 64B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE