Static task
static1
Behavioral task
behavioral1
Sample
0ba2bb20486ac709a9cbc074f75b4856_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ba2bb20486ac709a9cbc074f75b4856_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ba2bb20486ac709a9cbc074f75b4856_JaffaCakes118
-
Size
83KB
-
MD5
0ba2bb20486ac709a9cbc074f75b4856
-
SHA1
d1f291ae6ce2ef9666a1b8e1efc61e63eb26b119
-
SHA256
e940a13599dba1385fdc816eb436ef9ce831980ee0336b149c58693983f0f6de
-
SHA512
ff9b4b7ac8a6edc08f3cd86dd540b9d1ad79f3c9b742ff0f19a85e2106c159f526cf73fac6c72b0b948a497b9303ab90daec543c0aa199b909168123c9ba1fb7
-
SSDEEP
1536:I7Dwfyac1u/0pYvO7Koinj7b1/UpcweODom4piyUo/FVy:I7Dwfyan/eYvogjfeGnOBUiy/FVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba2bb20486ac709a9cbc074f75b4856_JaffaCakes118
Files
-
0ba2bb20486ac709a9cbc074f75b4856_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hcn Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE