Static task
static1
Behavioral task
behavioral1
Sample
0e07777c1b53dc5fd0a065276e586edf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e07777c1b53dc5fd0a065276e586edf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e07777c1b53dc5fd0a065276e586edf_JaffaCakes118
-
Size
796KB
-
MD5
0e07777c1b53dc5fd0a065276e586edf
-
SHA1
080e4797612c201507c5010db7b45b13376c3036
-
SHA256
e02dcbe5dee839636ac32e1113ef52863565846521d4f9b9c0ef78494e3a4f3f
-
SHA512
ca840881ffceb00510bb8297c7121a5a80114362fccf6558da773665e5cd053fa3dfd3785c0202a85f61fdbcae6d91213908f97d0437865830c9f83bc3587f82
-
SSDEEP
24576:pypaQkruhpRR5xb43Pls4AoOFn/Ctp1lzniEW7GqIu2:pyQ8slJy/qHhiEKGF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e07777c1b53dc5fd0a065276e586edf_JaffaCakes118
Files
-
0e07777c1b53dc5fd0a065276e586edf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
rwqu0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rwqu1 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rwqu2 Size: 110B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE