Static task
static1
Behavioral task
behavioral1
Sample
0c37373cde6c1217ef97aad575fcdeb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c37373cde6c1217ef97aad575fcdeb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c37373cde6c1217ef97aad575fcdeb7_JaffaCakes118
-
Size
99KB
-
MD5
0c37373cde6c1217ef97aad575fcdeb7
-
SHA1
1b7e93d7dbcef09e4a82ca2c9a2b67508985cfd5
-
SHA256
697de3efbb9a94f27e3a1b887e9e96e78ffa4486b3ea881d31771ae850582815
-
SHA512
87d88492252cf8e6f18a0d80a2fac7abdc1745a662baf551077d7c0c32f34f172057860c9fb66c5fbdd31c84edd0f45264d340a83c78102dabc090e3e2e61bfe
-
SSDEEP
1536:xLM90cohHNjkbJE01ixgyZu5R5U+lPfhaLHkedtPK0yhy/14gSd/T318zQw5JrEE:xE0/Pjkx1ixw5ZaEOKg12/TSzQ5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c37373cde6c1217ef97aad575fcdeb7_JaffaCakes118
Files
-
0c37373cde6c1217ef97aad575fcdeb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE