Static task
static1
Behavioral task
behavioral1
Sample
0c5ddb22774f7b1eeaf9ebd3f288264e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c5ddb22774f7b1eeaf9ebd3f288264e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c5ddb22774f7b1eeaf9ebd3f288264e_JaffaCakes118
-
Size
33KB
-
MD5
0c5ddb22774f7b1eeaf9ebd3f288264e
-
SHA1
793c8e61ca42e39e4a3d824d85d308dcb84b0744
-
SHA256
a858594e7e7e2fcb2c1ae834c5ffbd130a5bcea6541397d8c6d7d5e039288861
-
SHA512
2627674d842c96a0e4c83ebaddaf2b3c955664b56f7d4aff3d9abed07917f6264405f79c109948fef682cdf420dbb067f6f8ddbc74429e18c0c8c6c5b5694dbe
-
SSDEEP
768:1fld/x93VV0wpcREMQ4BBDNZ+yYBJs0iCUex:1frX9pcSMXBBOBJsjh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5ddb22774f7b1eeaf9ebd3f288264e_JaffaCakes118
Files
-
0c5ddb22774f7b1eeaf9ebd3f288264e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.qzod Size: 27KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yrcbub Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cjuv Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xyf Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE