Static task
static1
Behavioral task
behavioral1
Sample
0cd60b9f23180e03c7ca5cc6768b1cac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cd60b9f23180e03c7ca5cc6768b1cac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cd60b9f23180e03c7ca5cc6768b1cac_JaffaCakes118
-
Size
17KB
-
MD5
0cd60b9f23180e03c7ca5cc6768b1cac
-
SHA1
517cc1dac0a19b08f5a011a39d4f15b099617c7a
-
SHA256
71b246bcc389bd7d67f01f8bd1491c8d568cd4c95e01b68685cb415eb2dd80b3
-
SHA512
35ed865c044e917d4d4005c7e0e57500d9c25d9b2342fde08ee5e2f701e26a983bb68e49e95a1189ebf398ba2251a73184985e01b1905f6c8b4d43946e5194de
-
SSDEEP
192:vfW/x/31h/WlVE3S9dyeiVC+eh8xjuo9uW1EyTyH8uBrDFXjEHIZ6MjrZyws:HW/x/Fh/fC9dyoDhouyuaGH8ImIZ7Z1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd60b9f23180e03c7ca5cc6768b1cac_JaffaCakes118
Files
-
0cd60b9f23180e03c7ca5cc6768b1cac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ