Static task
static1
Behavioral task
behavioral1
Sample
0fb6a02a8644302795f5cab64aa757ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0fb6a02a8644302795f5cab64aa757ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0fb6a02a8644302795f5cab64aa757ce_JaffaCakes118
-
Size
92KB
-
MD5
0fb6a02a8644302795f5cab64aa757ce
-
SHA1
68d5940917d9fe50f87d7761574e3e1baca671a2
-
SHA256
61a468c550869d264b1d16b7fc719cbad85706ff9407dd081f2acb4d5ea03cdd
-
SHA512
de90a786a9325c85b3febc45e446ce1d12738dffdbb19403ecb45cce2b353137bc868aa08c758e6679f932788659109ce9c7f0d5659f2cf87701ea4a1e69425a
-
SSDEEP
1536:rnXztc/BxOi9OymDFLLxeeAF/oytvWuv9BGVKKZPyO5TV:rnXztcOiXm5fVAFQFulCPLJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb6a02a8644302795f5cab64aa757ce_JaffaCakes118
Files
-
0fb6a02a8644302795f5cab64aa757ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nbu Size: 68KB - Virtual size: 4KB