Static task
static1
Behavioral task
behavioral1
Sample
0e6d9cd7c89a221b59a408fcbcdf0876_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e6d9cd7c89a221b59a408fcbcdf0876_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e6d9cd7c89a221b59a408fcbcdf0876_JaffaCakes118
-
Size
38KB
-
MD5
0e6d9cd7c89a221b59a408fcbcdf0876
-
SHA1
c01eaa4d4e5eabb5f6ef3e1901002d137ccbcde4
-
SHA256
e081d9ce051de03dc774e3d0e8746b5228956a3bc479b5c08a4d5aa3e043ba99
-
SHA512
9377b4617495a865bd05f4a439324b8b1c2a2f068615aa0f8b3cd929c9a7d5147bd52a7621b40282dc728dd8c4e17596e12b0b45f369def7eaaed47215abba15
-
SSDEEP
768:4lvkF0gWcy15/cOqlAwag87u2A9bWN5s:4lGMz+v4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e6d9cd7c89a221b59a408fcbcdf0876_JaffaCakes118
Files
-
0e6d9cd7c89a221b59a408fcbcdf0876_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE