Static task
static1
Behavioral task
behavioral1
Sample
0ed6cdf3fe8c500e26802de594f3f258_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ed6cdf3fe8c500e26802de594f3f258_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ed6cdf3fe8c500e26802de594f3f258_JaffaCakes118
-
Size
169KB
-
MD5
0ed6cdf3fe8c500e26802de594f3f258
-
SHA1
194786ee87b84e2be7db3f8c7c50af607d75532d
-
SHA256
ca46ff924112da2ca55d4759f7b1007f909db62868f2554af683be2078773065
-
SHA512
d896b060caf15d3d2d9e28424eb4a67dbef45595bcb430cb15d6c89641a230d609c3593814619f14041f1a3d0d35f5cb0a4bcf32f5c59fc8643b3e1f054038e0
-
SSDEEP
3072:lzUPZQhJPXt2ZR+S2s6ILa71b53/oLwc6xwEI6xlM/qUgDkBrp4h/vk:lYPiJPIZQSv6L1dn6ix2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed6cdf3fe8c500e26802de594f3f258_JaffaCakes118
Files
-
0ed6cdf3fe8c500e26802de594f3f258_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 158KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE