Static task
static1
Behavioral task
behavioral1
Sample
0b9a13e586bff6da30a4f968fed24a68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b9a13e586bff6da30a4f968fed24a68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b9a13e586bff6da30a4f968fed24a68_JaffaCakes118
-
Size
464KB
-
MD5
0b9a13e586bff6da30a4f968fed24a68
-
SHA1
d470b464fea17844d782e35c80f806ab78490300
-
SHA256
7fbf2eb5f3bc3f9e41b9e974ea35444a422021dbba749a39c12dc86c94b16100
-
SHA512
52c74ed9f83d5329cb559774a3a5fba6004f24ae9e4397720b94b5b26680df4eea25b5602d000adfaa0b8a599ad66496aae488b6b6ae21c76492e643979b476e
-
SSDEEP
6144:an+mDVLTKGjeFMedLOnyuUomGxvzL9Jwgq:YpTO3EmGxvzxJw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b9a13e586bff6da30a4f968fed24a68_JaffaCakes118
Files
-
0b9a13e586bff6da30a4f968fed24a68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ehbaf Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e976 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.33g0 Size: 387KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1fa4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ