Static task
static1
Behavioral task
behavioral1
Sample
0ee0f8c4f65cc80cf0616fd565293153_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ee0f8c4f65cc80cf0616fd565293153_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ee0f8c4f65cc80cf0616fd565293153_JaffaCakes118
-
Size
84KB
-
MD5
0ee0f8c4f65cc80cf0616fd565293153
-
SHA1
60e35e4bed9140da62298fafcb791b0d686c848a
-
SHA256
d2dd91b88677801a1c50123e537e6233a7be354a6e2bfc2626807af6dce1b46f
-
SHA512
fbd2b20aa4365df5836f0fcd7f903157b78dff3cd3947ad15202f63e0d72c38aa6518354631806400c9af7ff7bcf304f7c13dd015d527d3e703c3933acc35c6f
-
SSDEEP
768:wgZ1xoqnMPoTKyY0itkxdp0w7caRIj/qI1DwUBb4zqphNcDNjkOJFxgFv:wKf6oWyv/yj+Ij/qIvGzANOguCv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee0f8c4f65cc80cf0616fd565293153_JaffaCakes118
Files
-
0ee0f8c4f65cc80cf0616fd565293153_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Syman Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE