Static task
static1
Behavioral task
behavioral1
Sample
0493d4f15f6c6768979566e240d9d02a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0493d4f15f6c6768979566e240d9d02a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0493d4f15f6c6768979566e240d9d02a_JaffaCakes118
-
Size
47KB
-
MD5
0493d4f15f6c6768979566e240d9d02a
-
SHA1
0c085f65fbd4d0d6fb6a4c85a003462bebd78926
-
SHA256
12c00cdd560ee850157a5963ba313af5aad79b116ca82290f28a26d9f28fdd07
-
SHA512
e6ea57b37744669c13af11e81b5976771fc2d34b57756295b79e15cce01f379e61d04cf05df958624e444ba9eb624e4a16950aac144dd397e6d1dd3b278c6785
-
SSDEEP
768:uqrPejL1KJuHhhDTZQ1bpp4W2MtLdzNCRE7VQasreDWxNv+vBapAo96FQF9mV:uaejRpDDFip4W2MfzMS7yCkN3pAnSsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0493d4f15f6c6768979566e240d9d02a_JaffaCakes118
Files
-
0493d4f15f6c6768979566e240d9d02a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ