Static task
static1
Behavioral task
behavioral1
Sample
0bbec95458db631f0c9da436d812a7df_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0bbec95458db631f0c9da436d812a7df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bbec95458db631f0c9da436d812a7df_JaffaCakes118
-
Size
290KB
-
MD5
0bbec95458db631f0c9da436d812a7df
-
SHA1
c902554f779d86641e47cbb071a570354565740d
-
SHA256
642b1d187b0d817fbe771d577063905c6dc7614a7090cafdff098e9ffdd36e87
-
SHA512
491a6a87354db00e4db9af2b3b7b25cd6954f087f5cea53905cd4b185cab985bf139eebb3c624ff6f25d6a9689187bbe0bd22f9f088d49e2742d5f1bebe72b46
-
SSDEEP
6144:sO/eS4m9kLr6E0n3BbrW+bp9rrcKwa8V+WJkfsf8Ne1TQ0YnZ:sO/14m+h0n31L9XcKVWkfs0N6MrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bbec95458db631f0c9da436d812a7df_JaffaCakes118
Files
-
0bbec95458db631f0c9da436d812a7df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 248KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 384KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE