Static task
static1
Behavioral task
behavioral1
Sample
0ee9c8f145b64ab6041dd8569a686afa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0ee9c8f145b64ab6041dd8569a686afa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ee9c8f145b64ab6041dd8569a686afa_JaffaCakes118
-
Size
184KB
-
MD5
0ee9c8f145b64ab6041dd8569a686afa
-
SHA1
dd99556d722eb5e4804fe4301e9e163cb43fc925
-
SHA256
9fd493eac8fbf524466f289fb07c7e1f058682a93ea0ae08ba671baa74cd4786
-
SHA512
fb27a572c1a1356605fc2dbfb9ef9a734c1ad2b8a097df2112539bd476a0d6dc9f672ed669b5190fb5cc6890a41fa08d611d762c8aa781a1902a023c17eddda8
-
SSDEEP
3072:kuRroT0xcOAEAmj3Mh2Oc8AMEXYMTxXldk7xKDP7VylPvpFv:kuhoxDEAIMYOc8M1BlylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee9c8f145b64ab6041dd8569a686afa_JaffaCakes118
Files
-
0ee9c8f145b64ab6041dd8569a686afa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ