Static task
static1
Behavioral task
behavioral1
Sample
f8332991f5586b2d213fb1f7dc90dc82_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8332991f5586b2d213fb1f7dc90dc82_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8332991f5586b2d213fb1f7dc90dc82_JaffaCakes118
-
Size
234KB
-
MD5
f8332991f5586b2d213fb1f7dc90dc82
-
SHA1
d15d20e3fda0e962ca8831e4affab6d5cedb164f
-
SHA256
67bfee8858096c6f7e17837a8cc3b950ba24e443381ffd4dc568b874fcbe9d28
-
SHA512
eaddd4c27270e96b56a872eef353ba0430b849ef7f5d2ecb0451202c9530541ac28a6284c54c9f194503d20daaffdbd5212b472d51df8a8b829404bc20902f59
-
SSDEEP
3072:mNYqnF0Q5Y1pA/AhCCpUvXnPFj28IeXpWvw9t+9fFJOXjQ6ZePQap80:5qL5Y1pAmCeUv3h28Ijq+NOLkQap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8332991f5586b2d213fb1f7dc90dc82_JaffaCakes118
Files
-
f8332991f5586b2d213fb1f7dc90dc82_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ