Static task
static1
Behavioral task
behavioral1
Sample
01bb6ca569652a6e5855f3d02469e7b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01bb6ca569652a6e5855f3d02469e7b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01bb6ca569652a6e5855f3d02469e7b3_JaffaCakes118
-
Size
18KB
-
MD5
01bb6ca569652a6e5855f3d02469e7b3
-
SHA1
4b18a93a5f6127f8dfe846b2c31cee440d5aafeb
-
SHA256
0ec0118ec0241cfbec4802430999f6bd90e267fe077ee07ac049d998f72db612
-
SHA512
334192d057d467582148cc8fa9b89680109a238e3020401462696452ea469b03e412dcd4c9865185d2383c2a8bb2b9417bc681a5dad77f909eeafff437e5fd9b
-
SSDEEP
384:mSW/WyLGGOu3vXaaDXx7WkdMiAXjN34dje0Qba3OH:vevXDXFfvATilQ2E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01bb6ca569652a6e5855f3d02469e7b3_JaffaCakes118
Files
-
01bb6ca569652a6e5855f3d02469e7b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�!X0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�!X1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�!X2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EMx203U0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ