Static task
static1
Behavioral task
behavioral1
Sample
1f0a20571eeeaa371d13c18579b487e6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f0a20571eeeaa371d13c18579b487e6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1f0a20571eeeaa371d13c18579b487e6_JaffaCakes118
-
Size
325KB
-
MD5
1f0a20571eeeaa371d13c18579b487e6
-
SHA1
fb45a7ff5ba357085ad3c6e1e6be167ca67ce696
-
SHA256
577224970e2202493057eff5b7537cb426281b659455c30fc40dc98826240515
-
SHA512
c159ff397f904e7fb87456f0f89c82e54f90c4831b81dade813295c7d446e5bb990147b87a13ff886a1cf7b93d56570b142cd4a2003799614110d55a02787269
-
SSDEEP
3072:iV+Cv5BHvNL0yWdwr8UxVMT2EDFjj4H1+2f+4fkt8lswu/IaJZtLEYrVg2BtzVm9:iV+u0bUDMT2EDFjj4bflswu/jtLFVgTv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f0a20571eeeaa371d13c18579b487e6_JaffaCakes118
Files
-
1f0a20571eeeaa371d13c18579b487e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ