Static task
static1
Behavioral task
behavioral1
Sample
0c4eadcfea9fc66ddff56d4ed630cd8e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c4eadcfea9fc66ddff56d4ed630cd8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c4eadcfea9fc66ddff56d4ed630cd8e_JaffaCakes118
-
Size
384KB
-
MD5
0c4eadcfea9fc66ddff56d4ed630cd8e
-
SHA1
742d8354205493d6968ef7c1a2260da5525c110e
-
SHA256
900968145092a3bcfd442a7f4f0acd6dbe1bcf7ca4c33810b04e3bd5866e36a1
-
SHA512
e4046935c530b1e532f4b09b561df1fb3105f81683ea0868c206f1dc7e1fa747a91fe967b39113ecebdd48a78caba8992937727539489e9c0babdee21c7ceaf6
-
SSDEEP
6144:kZkXsLQpaJfysESvdox8Ymh9kpF2wWv5++OaTh2LCuHC8xYE+IYOkadlKuG5s1VU:Gk8LQsf/ax8LkpF2aeh2LCkCwQIZkade
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4eadcfea9fc66ddff56d4ed630cd8e_JaffaCakes118
Files
-
0c4eadcfea9fc66ddff56d4ed630cd8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ