Static task
static1
Behavioral task
behavioral1
Sample
f0ee48584aec1c00ce864d1680938bbc_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f0ee48584aec1c00ce864d1680938bbc_JaffaCakes118
-
Size
396KB
-
MD5
f0ee48584aec1c00ce864d1680938bbc
-
SHA1
5ea7785625d54f29b4beb49d02178028b77524c0
-
SHA256
892f44a70d446743ec685579097a5db7de771ff9df788a1c219f72b2030ceb78
-
SHA512
f45d6628c1764279e648387d863cc035b828d01fb07ec5e5decf29cf7cc41919647be8bde41e0ec38945801786b410ed0e9721973802820a3c10da450cbafc18
-
SSDEEP
6144:yeUf3d4ae5PjzqOwkBHb0cfjk2EkDErEpyqpFKXCYXivYgx0QOVoAtrlcDlTjHp:yHfN4d56Rk50oZKENFKSgKYYDZp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0ee48584aec1c00ce864d1680938bbc_JaffaCakes118
Files
-
f0ee48584aec1c00ce864d1680938bbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 383KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ