Static task
static1
Behavioral task
behavioral1
Sample
0c51c02e684c45539c902aca161f1347_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c51c02e684c45539c902aca161f1347_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c51c02e684c45539c902aca161f1347_JaffaCakes118
-
Size
20KB
-
MD5
0c51c02e684c45539c902aca161f1347
-
SHA1
341b7fcf6e5673e1ac6180f3ca12920678ac1b1e
-
SHA256
a140df8fe0016b1cc158dc655c781774e75a159b3270a3e359191f751b9c8289
-
SHA512
18a64edd84d4a2702458d4def1009254de774fd5c61a3244903121c0aacdb25d1c69410357c9a7abeb14cc10c98ad514f18d75ef1c320bb3375cd9801b2df55c
-
SSDEEP
384:uLX6hBYMpkeeC77LWbxzFjtgMbcUxfhGSxQ8xLCGKUj0UwliobO0:4KcMph1eff/Gx8txj05liu3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c51c02e684c45539c902aca161f1347_JaffaCakes118
Files
-
0c51c02e684c45539c902aca161f1347_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE