Static task
static1
Behavioral task
behavioral1
Sample
0cc9f8d95c8500c480c0d24abb16fdc1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0cc9f8d95c8500c480c0d24abb16fdc1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0cc9f8d95c8500c480c0d24abb16fdc1_JaffaCakes118
-
Size
368KB
-
MD5
0cc9f8d95c8500c480c0d24abb16fdc1
-
SHA1
0c0b8adb2c59e46726ae26a8cc9964f9222b1d6f
-
SHA256
e7060825e7041e89ae5e5b41b40f3a5875c7efa86bfa0aa5fd0ef427e6f15403
-
SHA512
3ad923264500fbb19e2a26130232db199f7b1e48c9cc66e0a21ebc498cbb69da9496d61471da039c0b715834f392359b98604392acb8aea38680bb965b1c4bd3
-
SSDEEP
1536:85qVQuPgU9SDBsX6nSzTWHMtedBrdm9BpK4fOrGjtRXLfVDV9GeWa0CPWB1:bJg2gsR3WYeFm9zK4mO9zVDRSCuH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc9f8d95c8500c480c0d24abb16fdc1_JaffaCakes118
Files
-
0cc9f8d95c8500c480c0d24abb16fdc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE