Static task
static1
Behavioral task
behavioral1
Sample
0d87fcb2572d118125cee522fbf560e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d87fcb2572d118125cee522fbf560e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d87fcb2572d118125cee522fbf560e4_JaffaCakes118
-
Size
382KB
-
MD5
0d87fcb2572d118125cee522fbf560e4
-
SHA1
c682e046e3d0aed9dea1f597e00323747dd87bb7
-
SHA256
01dfc6d6a47462a82191ca2e972267c801bb271b3050281fe07e252e0cf2c0a8
-
SHA512
4e6c191be3727c5e9c120908672cba3ce87dbe1ada2aaacfc1b2eda36f0952552e2bf062f9dcd1122b850b7350f86ca43ee82f34923bb394e2b0c52464e21896
-
SSDEEP
6144:/Y8Pg0D6D9g/PlYcd3Ka6pEwVRQeyYsHQOo/RLe2wxXCMH/Jxz287CA8td0DM:Q8Y9De/DNKQmXf5q2aCM3vCV0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d87fcb2572d118125cee522fbf560e4_JaffaCakes118
Files
-
0d87fcb2572d118125cee522fbf560e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 310KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE