Static task
static1
Behavioral task
behavioral1
Sample
0c21ad24e06cc5efc86eb7aea00c2604_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0c21ad24e06cc5efc86eb7aea00c2604_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0c21ad24e06cc5efc86eb7aea00c2604_JaffaCakes118
-
Size
126KB
-
MD5
0c21ad24e06cc5efc86eb7aea00c2604
-
SHA1
6a4e915f322f44c28eaa937ef7c96c2571a4e888
-
SHA256
ef3a218af00c8e9e0aac4663a0ad6a44d7acab9baa09dd996319e2c828a27900
-
SHA512
4f3e8701d910cec05876a06a5f8b81db960afa50df504f44496ffd477f872376cd1a75bffb586a20fda2df02a406a36d5be0fc01829ad60040262d02c947f1c0
-
SSDEEP
3072:T0lE4ct5xMIRPpmFkyrW9c8yjcdK0oGU7TQwPzrc77OWw8x8cJ:gOrt5xMaPp+kyrWCKIG4fc769/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c21ad24e06cc5efc86eb7aea00c2604_JaffaCakes118
Files
-
0c21ad24e06cc5efc86eb7aea00c2604_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 76KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE