Static task
static1
Behavioral task
behavioral1
Sample
0f491f7f6b0cb972d5958e5c0a8fb4e9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0f491f7f6b0cb972d5958e5c0a8fb4e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f491f7f6b0cb972d5958e5c0a8fb4e9_JaffaCakes118
-
Size
9KB
-
MD5
0f491f7f6b0cb972d5958e5c0a8fb4e9
-
SHA1
fefb2f12beb36ccbab9cafee139728f1a6c41f3f
-
SHA256
1ac7fcf210fc49b2853bdbe9642a09028e7228f6a68089befa74d193965fdfee
-
SHA512
d140338346c093676320bc1b0677b658a555fd378e70d77ef380efa1ec81722a1eb00edef7a8b5114aceefc5925f39daa140adc1547fb36c8ac95ea9438f0c91
-
SSDEEP
192:kQ0EJMEbGhFyHJYqLTPCaiMyb75E+mAVuMuimqzcJ7ZUbRV5k:kQ0EJtiuH6iTVyb75E+gnim3JObRV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f491f7f6b0cb972d5958e5c0a8fb4e9_JaffaCakes118
Files
-
0f491f7f6b0cb972d5958e5c0a8fb4e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE