Static task
static1
Behavioral task
behavioral1
Sample
00efa101c3755253b928f36c000c45d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00efa101c3755253b928f36c000c45d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00efa101c3755253b928f36c000c45d2_JaffaCakes118
-
Size
13KB
-
MD5
00efa101c3755253b928f36c000c45d2
-
SHA1
052ef04db3752b5f71f8ba161942d903cfb459e9
-
SHA256
cef206b6fb68d521b8e63d791111bc06df0746df7e936fec66d94887487a1a28
-
SHA512
5fd2ba7298469de72d6ce139bb238f7e33dc5d799301fce10c7d1b18f17252ad043365aa3565c54e0397785877ddbba46702f26df5881c2b64f4a1735854e514
-
SSDEEP
192:OeUQ6IE6GPdz0im2TnHOPSdEAtCaxKijUY6JTQJ53r/QKsSlvKO8eyilZDDNTn:OeUQ3E6sqWu6dEAQaFy2rY5SrNhRTn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00efa101c3755253b928f36c000c45d2_JaffaCakes118
Files
-
00efa101c3755253b928f36c000c45d2_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddt Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE