Static task
static1
Behavioral task
behavioral1
Sample
0b1dc696a6ced4b72235122d41d1d40c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b1dc696a6ced4b72235122d41d1d40c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b1dc696a6ced4b72235122d41d1d40c_JaffaCakes118
-
Size
14KB
-
MD5
0b1dc696a6ced4b72235122d41d1d40c
-
SHA1
567e69b7654d4ac7d861b01fc44e5bd2ac0553e9
-
SHA256
cdc1d29f40944681da452a0aea27aad0aeb207cd255d1ad78cee347f7d56178e
-
SHA512
0acb5ea99fcb8e4854bab1dbe0ae9c812d4d3a1254887d3a576fb63d229798facbd2a7bf178ecddd59bb46c0e2038cdab54f939ea047e3d757a6959514188802
-
SSDEEP
384:GOeb8GO61Xqzg1xweLBL80iA5sddHnHQfhHj4wqC6DNednHHnHz:GO3z6vKeLRCA5uHHCHzqGdHHHz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b1dc696a6ced4b72235122d41d1d40c_JaffaCakes118
Files
-
0b1dc696a6ced4b72235122d41d1d40c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 358B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 891B - Virtual size: 891B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ