Static task
static1
Behavioral task
behavioral1
Sample
0aea0e7a9b2e68e81f3ca57bced98459_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0aea0e7a9b2e68e81f3ca57bced98459_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0aea0e7a9b2e68e81f3ca57bced98459_JaffaCakes118
-
Size
58KB
-
MD5
0aea0e7a9b2e68e81f3ca57bced98459
-
SHA1
b18b7f98bed802d8d00d457ceed89acfd2b650c6
-
SHA256
bdcf65ebf5764b3b34a8217a9ef733bd3590cd651f8d5d4b66f757dec5e9d0ba
-
SHA512
c28c24ab1139bdd1c3688cbe55660e6d86024d563ce86a5ebcaa4a7cd5f37ae2c794a217d4a84ed542f46ceb1e24be14f50016af26a074fb107bf401d82a6ba3
-
SSDEEP
768:skX45BtkNffySE6Q2JTPMKcsxFoIntop9yD3JD34ZriIAxKj+itN+qu+rwj:M5QNyx+T0ObTCczJz2A4z3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aea0e7a9b2e68e81f3ca57bced98459_JaffaCakes118
Files
-
0aea0e7a9b2e68e81f3ca57bced98459_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ