Static task
static1
Behavioral task
behavioral1
Sample
0d2aa358853d947d58e8b31619cb81d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d2aa358853d947d58e8b31619cb81d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d2aa358853d947d58e8b31619cb81d8_JaffaCakes118
-
Size
30KB
-
MD5
0d2aa358853d947d58e8b31619cb81d8
-
SHA1
79929a4794224a4dee1a59cd7578c2ade822a286
-
SHA256
24ed9624544f4195f0a3fd49a966980b0ecb824029934a0bca17524892758d3b
-
SHA512
341d59800581542a1d1ce5d4134acb133028dad90da9a833f5d6c39d09aa7442c545bec1d83b8eb5b37b66b294caf5f300e4554941b6dbe4cc67cbc78a02de21
-
SSDEEP
768:TU6wHpNgkesCddCrakOn5uq1DtGAMF2nCj+05C:TU6wJNgkesAdCufn5rfGAM0C95C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d2aa358853d947d58e8b31619cb81d8_JaffaCakes118
Files
-
0d2aa358853d947d58e8b31619cb81d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE