Static task
static1
Behavioral task
behavioral1
Sample
0b92e3ebeabf4c81a5f9bdb11ec9d7da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b92e3ebeabf4c81a5f9bdb11ec9d7da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b92e3ebeabf4c81a5f9bdb11ec9d7da_JaffaCakes118
-
Size
189KB
-
MD5
0b92e3ebeabf4c81a5f9bdb11ec9d7da
-
SHA1
9dd1c0d6ef1c2e0c715f1cd2c59ef077778530df
-
SHA256
ddd8241c745647b8faf85e2d29b539f1d93fcc7c250a02450342b15af6d87e12
-
SHA512
34c8309c40a2f1343f2772ade056b0f14a5518bee3c5700f2fa5962a971d9055f9be16eb2aa1baaf06466878865e1efe1324d1e44945a48a92ad5fd1a65bcacc
-
SSDEEP
3072:NgQ+J9IaSy98vxpj75oIM9auNVyy4ykdVtiGL9aAZFih6/z76Xy5n:2Q+2yi5t5DVMVybykdVYGZ3z/qq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b92e3ebeabf4c81a5f9bdb11ec9d7da_JaffaCakes118
Files
-
0b92e3ebeabf4c81a5f9bdb11ec9d7da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 66KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE