Static task
static1
Behavioral task
behavioral1
Sample
0a67296d27e0041352e0416cf56a4f7c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a67296d27e0041352e0416cf56a4f7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a67296d27e0041352e0416cf56a4f7c_JaffaCakes118
-
Size
27KB
-
MD5
0a67296d27e0041352e0416cf56a4f7c
-
SHA1
7c07c70043ed64ec5edbccc91337dbf5b3669bf8
-
SHA256
dcf09946ce943e3b286569f70a8a915fd141b46ecdb0d3448e58f9ecc99ed6b4
-
SHA512
0cf2357db0905f8dba59485a3bdd73b9991873fe6e21c10205643765656575f0e18d3a01e082d34a761560b715fa3250025f73e75178cf55bda5e47c2ed6b423
-
SSDEEP
384:mNSJsKD+KD2PA2vDZeYDiTsArp1kX0XO+OwO0E5Kevqet53BAlaUJJBgV/2SCMGR:SSH2leYeAA7kX0e+05l7Bela0cgTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a67296d27e0041352e0416cf56a4f7c_JaffaCakes118
Files
-
0a67296d27e0041352e0416cf56a4f7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
coofly0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coofly1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coofly2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE