Static task
static1
Behavioral task
behavioral1
Sample
0d0ebd59bf9dc42974b97dd1951a5e67_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0d0ebd59bf9dc42974b97dd1951a5e67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d0ebd59bf9dc42974b97dd1951a5e67_JaffaCakes118
-
Size
70KB
-
MD5
0d0ebd59bf9dc42974b97dd1951a5e67
-
SHA1
14f68af99797055d63671f598a7097e92826a5f7
-
SHA256
06c3ebc71b5d208aa0c737e65ce630fe1b8be5d1a92557f6bedb219d9e6dfd44
-
SHA512
3f19f69863581fe3f7beefabe6d5f015869051cec258f79a284834f9b0af71ba2705dcf19bf4e6e8a024049c623695ee1c2eb7966ff42c089172b3ae6d810eaa
-
SSDEEP
1536:nGeD2UWa4r3Y7f0gy7zPwZDj2LS8GVjquZQeBg0+nH3hjnS:TMTRzw8LAVjqaHG0+nXhrS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d0ebd59bf9dc42974b97dd1951a5e67_JaffaCakes118
Files
-
0d0ebd59bf9dc42974b97dd1951a5e67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 69KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE