Static task
static1
Behavioral task
behavioral1
Sample
0ccf6b3fbded70c49cb1ecf715613d45_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ccf6b3fbded70c49cb1ecf715613d45_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ccf6b3fbded70c49cb1ecf715613d45_JaffaCakes118
-
Size
48KB
-
MD5
0ccf6b3fbded70c49cb1ecf715613d45
-
SHA1
37be00c002846c048ad72919a89b49093a4b94c4
-
SHA256
09dc1955251d0bad9904f34f4c35b5550faa6af16c783bb39c8987dcf1f6df71
-
SHA512
e7feb81bbfdcdec1c398ba0dcdb52f9a2b2c042433ae5f158d0175045f9551397e6486ebfdef23341970f3e6c7617df37661307e2df7da8dff37e77199e44e71
-
SSDEEP
768:P+Wms1FBYg5hB+PRqF1HRdDRoV0sptvUeYiVyDyqRNzGZGBZYeGlqn4Lgq:WWmsV5hEgRdD+Vzeed01Glqn4Eq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ccf6b3fbded70c49cb1ecf715613d45_JaffaCakes118
Files
-
0ccf6b3fbded70c49cb1ecf715613d45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE