Static task
static1
Behavioral task
behavioral1
Sample
0e50eaee9e8da0a93d55daa3bda5e377_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e50eaee9e8da0a93d55daa3bda5e377_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e50eaee9e8da0a93d55daa3bda5e377_JaffaCakes118
-
Size
629KB
-
MD5
0e50eaee9e8da0a93d55daa3bda5e377
-
SHA1
5ad7b3beb6d8423ed7ff27d3a83d539d47d95c4c
-
SHA256
b026edb40da59df518bcf5aca9182de730fe986352bf07919efc052704a3fdec
-
SHA512
bcdbec4e5a9bd6a81cfea0133f0cd02271c188c638b0a881e612d56793be4f6bbdf23a4f3b565fe944808e5803d99dbbbac453eff54e8132f7a3df28973be4fa
-
SSDEEP
12288:JYnHGqMA+lHqpGERC13VvA6BH5fYoqTWAKiZAp:JYn8IRC1FvA6vfLqaAKiU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e50eaee9e8da0a93d55daa3bda5e377_JaffaCakes118
Files
-
0e50eaee9e8da0a93d55daa3bda5e377_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 610KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE