Static task
static1
Behavioral task
behavioral1
Sample
0c7bbadb285e550738f8bc8cc2538454_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c7bbadb285e550738f8bc8cc2538454_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c7bbadb285e550738f8bc8cc2538454_JaffaCakes118
-
Size
88KB
-
MD5
0c7bbadb285e550738f8bc8cc2538454
-
SHA1
4786ba9c35a7e4fa640236896042283726d1df3c
-
SHA256
d2c07679857fa07fd865c4da8a2382fe3510e10d43dee45879921cf42719ee65
-
SHA512
4ce16b1526901298de4dada8adf80cb169ac955e8aaddef2b6ab86481876945b5fcfc0870be1673473d2f8e04ca683937ebbdb6a484187e63193e8c84f18feaf
-
SSDEEP
1536:XNo+6eDN+OkCIrM6W1Nn3U5Ei6U65PuN3IW4mpUvg1bRhzYr6YVcpmgjq+oDapB:XNweDNxkCIFW/32SkN3IlmpMIbnzk6YY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7bbadb285e550738f8bc8cc2538454_JaffaCakes118
Files
-
0c7bbadb285e550738f8bc8cc2538454_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE