Static task
static1
Behavioral task
behavioral1
Sample
0e9c153138729735b5a0a9653b54c9fc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e9c153138729735b5a0a9653b54c9fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e9c153138729735b5a0a9653b54c9fc_JaffaCakes118
-
Size
354KB
-
MD5
0e9c153138729735b5a0a9653b54c9fc
-
SHA1
0e67e01862d2d15f4c3ca9871033fba4b3661331
-
SHA256
79c028b99ea8119e0eb3ad794cc58034e0a9a538605c287e523ce5f8ebade890
-
SHA512
9c48124dccad9a3272cbbd02c13c6c63f123afe5bcfb3f010d367bbdb891b2e736bfb6602c2ecf8d4c30dc5a49305f1c592b89d27e5aa7da0b5874e854a2202b
-
SSDEEP
6144:AWxZad6iOg67QrSAbkr8QJFrmuU+BC6rN9rR40NfjwTEXD/fxvULag+g/7:3cdPOg674yrxLh9rR4Ofjwuj+eg+g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9c153138729735b5a0a9653b54c9fc_JaffaCakes118
Files
-
0e9c153138729735b5a0a9653b54c9fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NUV0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NUV1 Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE