Static task
static1
Behavioral task
behavioral1
Sample
0e094e6372b0e62fe732fce3cbaffa10_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0e094e6372b0e62fe732fce3cbaffa10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e094e6372b0e62fe732fce3cbaffa10_JaffaCakes118
-
Size
258KB
-
MD5
0e094e6372b0e62fe732fce3cbaffa10
-
SHA1
3013771f63ccc8b047b2d76e8d44913dfeaa706b
-
SHA256
ca6b05bbaf87a0f8d9595daf20802208a0cddb0b34cdbfada41470b3e21dcac9
-
SHA512
6e49ef3eaebdb3ff1e97bc009d1feefdc9fae49c45ae6a0afc851632e72b279f2050c82b2c5dd0a982515ac16fe07b2d09822106e2e7e5ce55bdc30fb56beea3
-
SSDEEP
3072:fPwBJH2oWKzl3qxia6dekQUbU0KzgO7adcjiibVxXYvtbmLKorWE:foBkZK8xivdekrbU1gaMcWibVpYvCPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e094e6372b0e62fe732fce3cbaffa10_JaffaCakes118
Files
-
0e094e6372b0e62fe732fce3cbaffa10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE