Static task
static1
Behavioral task
behavioral1
Sample
0ae6e4b32fc30364cf79e4073481f650_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ae6e4b32fc30364cf79e4073481f650_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ae6e4b32fc30364cf79e4073481f650_JaffaCakes118
-
Size
4KB
-
MD5
0ae6e4b32fc30364cf79e4073481f650
-
SHA1
1f44a4f2d13fadbccc0b2ae12de3b32ba2fa2cfe
-
SHA256
d9210557d3812466c7de7843de7196931ad00131bf3808966de297733a154d0e
-
SHA512
c641c2394620c7701b1fed287d61b3cf8c0b09dc66419ebd4d59bd18fdea0f4c91305b9b129e60952f0aa669fa69e1f376693b81d6a34dc5f3513e82983918f2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae6e4b32fc30364cf79e4073481f650_JaffaCakes118
Files
-
0ae6e4b32fc30364cf79e4073481f650_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dat Size: 28KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ