Static task
static1
Behavioral task
behavioral1
Sample
0c18309b57ff539de15eb83a81ce52f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c18309b57ff539de15eb83a81ce52f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c18309b57ff539de15eb83a81ce52f9_JaffaCakes118
-
Size
73KB
-
MD5
0c18309b57ff539de15eb83a81ce52f9
-
SHA1
c3577ecf551bcb7f3cb2870480114eb6f98f590b
-
SHA256
6e801c11a1f7be09c0bac97b6ab5d803f5fbf9f3911b36f907ecf0de293ac47e
-
SHA512
e7aa3b00f5f549ef2e390ff4a11c9720785bf0ac2ad818c722ae4ff7c36d8c64be44bd6647646c9041a55c0a5054a5423d03e556a7f22344b1a04a30c70efc41
-
SSDEEP
48:8kBOf7nHbr5KIItSZmChe9XM2CGvvol8obgAs/BBa6jEFdeP8VPX5TskIIAQaDre:EDH0IobM2Z4l87AsJ34pTJAdNLjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c18309b57ff539de15eb83a81ce52f9_JaffaCakes118
Files
-
0c18309b57ff539de15eb83a81ce52f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ