Static task
static1
Behavioral task
behavioral1
Sample
0866cfc4b19040ff09c8da2189123b09_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0866cfc4b19040ff09c8da2189123b09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0866cfc4b19040ff09c8da2189123b09_JaffaCakes118
-
Size
120KB
-
MD5
0866cfc4b19040ff09c8da2189123b09
-
SHA1
0c6fb034bc9cdb9d575b2d66cc362164a390fd59
-
SHA256
e22d02178e5669742f8ea307145280b985fe7b7beeb24614b11db16d949de62d
-
SHA512
3d07807cd3a732163d4ee43b167928b777b44d915ff05b299396385d80961d1f4b554bf25b92c38f878e388f2fefe59f4aa9d66074ed38bd23d715de6e5f8491
-
SSDEEP
1536:BVv2BCX4Xs95BXS6x4ZX1zkeMqBaSs/zlwJp52S9QLTbs0j61Hqo6oHQGt:BVvUCD5oOcXWZgaSs7IuLE0j05rwGt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0866cfc4b19040ff09c8da2189123b09_JaffaCakes118
Files
-
0866cfc4b19040ff09c8da2189123b09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ