Static task
static1
Behavioral task
behavioral1
Sample
0cb1321d4aa7be1f6cb2bdae8a4a3ee0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cb1321d4aa7be1f6cb2bdae8a4a3ee0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cb1321d4aa7be1f6cb2bdae8a4a3ee0_JaffaCakes118
-
Size
60KB
-
MD5
0cb1321d4aa7be1f6cb2bdae8a4a3ee0
-
SHA1
9d309e0915b21b8ffa11921e74e57219ef1b6c3f
-
SHA256
1a417d6aed40a78844fcb03dd867b31a90e62d0acb5d3a8951f684603e507f37
-
SHA512
1aac7a4d709081ea1a7bbe2862150d3edcd7686c420fff0b721dd1912a0c6ff43cb1cba07ab6f13adb408db28a9ae28682c94ff1233eefa69891a989040f31c8
-
SSDEEP
768:xdLo9/06rjgH5M7l8v1Y990gwE/R4NM7AKqh7sqHU:xa1VrjgHOx8vK0jS7A57sL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cb1321d4aa7be1f6cb2bdae8a4a3ee0_JaffaCakes118
Files
-
0cb1321d4aa7be1f6cb2bdae8a4a3ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 446B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE