Static task
static1
Behavioral task
behavioral1
Sample
0f5f939f7e7ca2d4f1b5ffda474f46da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f5f939f7e7ca2d4f1b5ffda474f46da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f5f939f7e7ca2d4f1b5ffda474f46da_JaffaCakes118
-
Size
23KB
-
MD5
0f5f939f7e7ca2d4f1b5ffda474f46da
-
SHA1
93940cd2c645b3ce5bafc51f833b40873c625f56
-
SHA256
c57219417e12b67478bfd9af9013ab60391ec0fb74788ff52ffc59278e92841d
-
SHA512
837391e8ed43811791fde0930ba0ecb6ef288c00cdedf30c08c6ad9726c49f9c359fc04eb68a2b6471ad57e9b44fd276bcc4e85f08da8527054d490eacbc3a11
-
SSDEEP
384:J/w4yfJnPMNbOqMA3zbGVolp4uVuaXa883zUf4hAFzzoVzH:J2dPf0zbGVH88y4hAdcVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5f939f7e7ca2d4f1b5ffda474f46da_JaffaCakes118
Files
-
0f5f939f7e7ca2d4f1b5ffda474f46da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ