Static task
static1
Behavioral task
behavioral1
Sample
0ddd171597a4298372442117d4986ce6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ddd171597a4298372442117d4986ce6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ddd171597a4298372442117d4986ce6_JaffaCakes118
-
Size
28KB
-
MD5
0ddd171597a4298372442117d4986ce6
-
SHA1
26a3e9838da44e3880b459cd5418e4fa48e83a83
-
SHA256
b981545785efe5a557623775cf87887534e4988fd9a064ec8b7bfc4d82fe877a
-
SHA512
f194708a861b68b73500bc7102dd5ab0dd3a608d2231287422726f8cffe3d247088ddc77c7496b1dfc130c41a1424e6ba2b51db1e0a3008e22d7eb0256d135b7
-
SSDEEP
768:bjbIByD2v5y8zyEJDmbN+Wj8M5po2puEzPPvwb/jakqmt:PcBKuEwQj8MrpbwLt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddd171597a4298372442117d4986ce6_JaffaCakes118
Files
-
0ddd171597a4298372442117d4986ce6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PESEC0 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC2 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESEC3 Size: 89B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC4 Size: 460B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 177B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ