Static task
static1
Behavioral task
behavioral1
Sample
0ef0387256c43a7d4670cc6c9a4dea12_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef0387256c43a7d4670cc6c9a4dea12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ef0387256c43a7d4670cc6c9a4dea12_JaffaCakes118
-
Size
427KB
-
MD5
0ef0387256c43a7d4670cc6c9a4dea12
-
SHA1
3d69f0c45f9df9436e0d9a302598b08842e6bd89
-
SHA256
a5e8e66a3b85bb5fbd61e12166048a75f3684067f63743d7bf9ec4d6e4d86732
-
SHA512
a0a94b16b097149b7c7a3ad98c241eb95deeb249894fcd82e27e8a2c4fb2230ca1d1aa9302b0ce372f7c69a6500d15a1b1da0cbab42d338a3625e3736f8f3a4c
-
SSDEEP
6144:ydHVFzLa4/yva4y5rn8eTXNSBXFtPJUbNkpaRSlceAMyzc4B4F3R+2TfM4kK:yhVFp/6E5rn3cvPaBkQRSl9ARzc7R9k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef0387256c43a7d4670cc6c9a4dea12_JaffaCakes118
Files
-
0ef0387256c43a7d4670cc6c9a4dea12_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���E Size: - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE