Static task
static1
Behavioral task
behavioral1
Sample
0f1060d7e1187291b3c388606e56e010_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f1060d7e1187291b3c388606e56e010_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f1060d7e1187291b3c388606e56e010_JaffaCakes118
-
Size
168KB
-
MD5
0f1060d7e1187291b3c388606e56e010
-
SHA1
a05258fbfb881355da7ae0bc0a0e4a5718ded17a
-
SHA256
703caaa1244130616389670388ce7b15a64b793dd34c03b448d454bd1a26c51f
-
SHA512
fa05da409c2a32c95e78a177203bd7fa51e09b4305160a18d64614d8f9c49ba3a118ee3538a1b00c242707b5eab60084d92640a56d42cc8a190850ae76ed82bb
-
SSDEEP
1536:6pRi3B8i9C7JXrVI4wC4GvnzpNAfrWfWFllWT7xkIs/7TAGSNoyn7:6oBZCYTuzp8r6WsT1kD/7T/SNoyn7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1060d7e1187291b3c388606e56e010_JaffaCakes118
Files
-
0f1060d7e1187291b3c388606e56e010_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE