Static task
static1
Behavioral task
behavioral1
Sample
0da18471b0b5710c8f0c678c42b29718_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0da18471b0b5710c8f0c678c42b29718_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0da18471b0b5710c8f0c678c42b29718_JaffaCakes118
-
Size
178KB
-
MD5
0da18471b0b5710c8f0c678c42b29718
-
SHA1
b58b6324d075a692ae30089266b0bfcc68d79e36
-
SHA256
ed7b5c01a285b94f9a10e04407c9c25672cae93c0bff187154907839bda49432
-
SHA512
31004ce5ede9b1537453a350e03391c6c99ab6a7e1c0dd0aaf0084bc2943cfb1d9ffd41115be43510fce0d169d780cdc99f8397686103491f153f63f75fd642b
-
SSDEEP
3072:z6/YA/8xARI42pv/wnbieuT8zPf8cCO+Z9/6MpSFKvfoK3adyVMwGUwmn4H5g8cR:zO/DRI42pv/kiYjb+ZT8EvJqdyCwM64v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da18471b0b5710c8f0c678c42b29718_JaffaCakes118
Files
-
0da18471b0b5710c8f0c678c42b29718_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 67KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE