Static task
static1
Behavioral task
behavioral1
Sample
0d175dbef83a5be3a1e38ec884fe4696_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d175dbef83a5be3a1e38ec884fe4696_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d175dbef83a5be3a1e38ec884fe4696_JaffaCakes118
-
Size
1.8MB
-
MD5
0d175dbef83a5be3a1e38ec884fe4696
-
SHA1
8185572f298752a24236acaf8b66489ea3c4a1d9
-
SHA256
9cbc8e8295362dede7e31c57336a8f0636980f6ac18dbe3a12eedc29240e55dd
-
SHA512
ab29318f6414d967fd9e47bba7c460b02455650e4e7ca9af660dedf835134a437a605fb3350b806a6971aa3e617871cfe423de48faf5c5f8e880eb329c129572
-
SSDEEP
24576:Uv2t0JpIL+y76AVkHhiCQF+uN+AHHwAudlDiTZaqdiXSp0c02uFG6dAk3CW:UutN7H2hQpIXdlOTZaqdwk0c05HGiB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d175dbef83a5be3a1e38ec884fe4696_JaffaCakes118
Files
-
0d175dbef83a5be3a1e38ec884fe4696_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 444KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ