Static task
static1
Behavioral task
behavioral1
Sample
0d6e4e0a8e6e5cd58b5350bcec33bc36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0d6e4e0a8e6e5cd58b5350bcec33bc36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d6e4e0a8e6e5cd58b5350bcec33bc36_JaffaCakes118
-
Size
125KB
-
MD5
0d6e4e0a8e6e5cd58b5350bcec33bc36
-
SHA1
7a07bc413e6e5b5049cb56dd560a5b29ea6ebadf
-
SHA256
6c179451d6a74ce73ec186074ba170d2a80d3c7e970a6f56d5ebc1b3314b21d2
-
SHA512
ee518ab23bd79b06a2ac5e32494d9b6ad19ecb95c6aa203492381ded218c5c70fc741bf3f7639e32f5ba4ee17901024a5a11fae93814c3ab888cfab45f1d3efc
-
SSDEEP
3072:a+/x80rydR5Gc8tCHi27fMYTShxelcQ7t:a+/x8WaTG27fMznelcM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6e4e0a8e6e5cd58b5350bcec33bc36_JaffaCakes118
Files
-
0d6e4e0a8e6e5cd58b5350bcec33bc36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 440KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE