Static task
static1
Behavioral task
behavioral1
Sample
0f11d83574c43eaea3d735d1cf3a65fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f11d83574c43eaea3d735d1cf3a65fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f11d83574c43eaea3d735d1cf3a65fd_JaffaCakes118
-
Size
352KB
-
MD5
0f11d83574c43eaea3d735d1cf3a65fd
-
SHA1
61f21318ceb647b3b2e0073d776596a3e8d32374
-
SHA256
ee75784d9a5a17071e2d4adc6c9bd4b03187675304734bf07b1b4eb922473a67
-
SHA512
2f8197fb2019a472306ba124fe355149cb617471b2bec795f5c86d3d7c6aa79e7ce263cb45a95593bd082469ad91d3995e508ebff7a9c2e05ed4f00ff05dc157
-
SSDEEP
3072:t7nHXY6gD6d8LmXZS+0dv3nCfEgl9K1q4+ac+8yhhpPxoLPRuKkfui31k5EEKcdx:tjrgesmXaYMuDad8wpGkmi312KcdA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f11d83574c43eaea3d735d1cf3a65fd_JaffaCakes118
Files
-
0f11d83574c43eaea3d735d1cf3a65fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
8wdbZP97 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
H5VqVVZF Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PntSD1LM Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECujQn3k Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BmUDS2nE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ