Static task
static1
Behavioral task
behavioral1
Sample
0f1c04c48b272ba9bc647d990790bdc0_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0f1c04c48b272ba9bc647d990790bdc0_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0f1c04c48b272ba9bc647d990790bdc0_JaffaCakes118
-
Size
47KB
-
MD5
0f1c04c48b272ba9bc647d990790bdc0
-
SHA1
619ce34a7c32d5b139b67f9fa8a808f43689e7f7
-
SHA256
ef4f12c2c8641fc00e0ed1a28e9bf29bedf3bd069a2f2da98d2fa716d7c01788
-
SHA512
49d8f0f47a6c6bc39778a025a6e7127531d63c0c035eea7c474d9a6c651740e70576c5654ce3c895e8d4b3745b74c59a679f10bc6f957626227eaf9ec6d06583
-
SSDEEP
768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3eB0W5YXRvrYVq3qQ4Wc:/g7wc1aGNC0klI7CPN3g0sa6WqQ4Wc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1c04c48b272ba9bc647d990790bdc0_JaffaCakes118
Files
-
0f1c04c48b272ba9bc647d990790bdc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ