Static task
static1
Behavioral task
behavioral1
Sample
0c4c00b09b52a2aab7729489b8fab109_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c4c00b09b52a2aab7729489b8fab109_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0c4c00b09b52a2aab7729489b8fab109_JaffaCakes118
-
Size
1008KB
-
MD5
0c4c00b09b52a2aab7729489b8fab109
-
SHA1
506a05fc9b2faaefbde3a9d9c88649a9fc5985a9
-
SHA256
fdebbdfb56087f63430bc1c45679bf25db9bf286c07a90e8ecc738f7dbb0875d
-
SHA512
f5b2f1fc90d7b723c685d52074ab36f8f42dfe3b0096825667f3cf95e246781087d9ede64314942069c82d935105ba3e8467f356ad2a85c9788b99aa6e9ee651
-
SSDEEP
24576:jD6CRhv9svSHkbHafXHd5cWe17LYBcGWQlpF:6CRhqHHu3d5cWe17MBcGFlpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4c00b09b52a2aab7729489b8fab109_JaffaCakes118
Files
-
0c4c00b09b52a2aab7729489b8fab109_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 688KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ