Static task
static1
Behavioral task
behavioral1
Sample
0c4a4c2819a1b5ad1edd27d03a3669a7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c4a4c2819a1b5ad1edd27d03a3669a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c4a4c2819a1b5ad1edd27d03a3669a7_JaffaCakes118
-
Size
69KB
-
MD5
0c4a4c2819a1b5ad1edd27d03a3669a7
-
SHA1
117f0a1c287b28ac32ae7d2d88c186bf3cb4a885
-
SHA256
c151a1f9cf36a464a005496635a32703f541705c3b76ce3f8720583299955e37
-
SHA512
8a819c2c3dbbb1276f24c9f75fc9157d5dae774d837905f93881acacb2863d225573a2143ce2135f2736b9a8dda58c7fb617335825d10f0cab8d5d2c45dc6b72
-
SSDEEP
1536:OzmYm4bvmcRFlxA+sNxXZTp61WOoIQ9kPYf7NFO46xmYf9TjN+I9fP:JYm4becR/mtNjlkWrIQmgf7NFO46x5fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4a4c2819a1b5ad1edd27d03a3669a7_JaffaCakes118
Files
-
0c4a4c2819a1b5ad1edd27d03a3669a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.tls Size: 30KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE