Static task
static1
Behavioral task
behavioral1
Sample
0de7f8b70f5b8e7b5be56b471d9db869_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0de7f8b70f5b8e7b5be56b471d9db869_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0de7f8b70f5b8e7b5be56b471d9db869_JaffaCakes118
-
Size
1.3MB
-
MD5
0de7f8b70f5b8e7b5be56b471d9db869
-
SHA1
330913fb506d2a14d9eb0b8ed2d9d8aa164c0185
-
SHA256
a157f35a7539eba57771a7ba5112f90b729f6b05d96c2139ab85f5e2ad9b38b6
-
SHA512
fe27bd5a940537d5fd3ea654eef82489c9f3c589bc29c1d8fff8fb16d29a0cc5d8cc8030ba64e2ee6ee6322b5973fc28e9a21999871e913585064992d02f359b
-
SSDEEP
12288:UGq7me/wv608IETw3psIPVO5zVXsPpgYml9C7oy/R5AIkg+do7AqT:UP7mek6TIEYsV8Tml9C7oyp5yJ9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de7f8b70f5b8e7b5be56b471d9db869_JaffaCakes118
Files
-
0de7f8b70f5b8e7b5be56b471d9db869_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ