Static task
static1
Behavioral task
behavioral1
Sample
0e18df63356bb3a1c466c0567e1a7416_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e18df63356bb3a1c466c0567e1a7416_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e18df63356bb3a1c466c0567e1a7416_JaffaCakes118
-
Size
41KB
-
MD5
0e18df63356bb3a1c466c0567e1a7416
-
SHA1
6752b5ae29a4156e97e5e6918e15355987c711a1
-
SHA256
15661965029197eea14157e03363c4cdf5dc4583e70c13a3a877ca30b377911c
-
SHA512
e4c1da45263d81618ae8a39ca1e86dde0b1ea2391152eb3ba47178c1972138031e6145ad5a5da5427e31aad42140c31ed8f347617b4fe2d9d771995fe5f4e166
-
SSDEEP
768:sPVgNI/PPKcJHm4fGVRLIGIeTczAdzCcNxXOiRbn4CRmF:swlMHNGV5qeTsA9lOiRbtmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e18df63356bb3a1c466c0567e1a7416_JaffaCakes118
Files
-
0e18df63356bb3a1c466c0567e1a7416_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0d3d2d3a357e37d5ed1dcbbb552ac5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetSystemInfo
GetProcAddress
ExitProcess
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ