Static task
static1
Behavioral task
behavioral1
Sample
0c5062d80b7af657a8733d5bfed79fc1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c5062d80b7af657a8733d5bfed79fc1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0c5062d80b7af657a8733d5bfed79fc1_JaffaCakes118
-
Size
1.0MB
-
MD5
0c5062d80b7af657a8733d5bfed79fc1
-
SHA1
6fc1c1b0b69d3b9757c21e8a798f700f37e390ff
-
SHA256
24e2a1b0e06dd5dd75ca00d82443b2801da2698aeec81811475af834a2c9c98c
-
SHA512
952beed04dbba522ef42f328bbff6831270def7348b34781bd0d873158cbceef86f0fee06a085ab633b4b4e58a3382b4580520041dca8fc0d2e7518dee4ef34c
-
SSDEEP
24576:UuhaYMSyjzahbPeviS2dbgMSyjzahbPeviS2db6:bpMSVbG5egMSVbG5e6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5062d80b7af657a8733d5bfed79fc1_JaffaCakes118
Files
-
0c5062d80b7af657a8733d5bfed79fc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ