Static task
static1
Behavioral task
behavioral1
Sample
0cf69b92cff650cc1d48edd9bbf94b20_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cf69b92cff650cc1d48edd9bbf94b20_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0cf69b92cff650cc1d48edd9bbf94b20_JaffaCakes118
-
Size
2.3MB
-
MD5
0cf69b92cff650cc1d48edd9bbf94b20
-
SHA1
64802074859d3ece3c939e50ee0ded2d76ccee33
-
SHA256
c9d08155aab82070d4223a4e559057b16ae7618569d4e17cbdf684dcac0647a9
-
SHA512
74b928623c83ced9f0d7565e339e72955abb5e1799840c774af3810b135cf2d0078aa8ab883899c5104d626447a8610bd8e42012087cc3344a5a84354a03355a
-
SSDEEP
24576:UuhaaerQZb+md4wmaOWOKerQZb+md4wmaOWOKerQZb+md4wmaOWOEDgt3:bDerQZbd2CerQZbd2CerQZbd2cDgt3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf69b92cff650cc1d48edd9bbf94b20_JaffaCakes118
Files
-
0cf69b92cff650cc1d48edd9bbf94b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ