Static task
static1
Behavioral task
behavioral1
Sample
1eb5749c7dcc051fcba6c27a3a7e2cfb_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1eb5749c7dcc051fcba6c27a3a7e2cfb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1eb5749c7dcc051fcba6c27a3a7e2cfb_JaffaCakes118
-
Size
48KB
-
MD5
1eb5749c7dcc051fcba6c27a3a7e2cfb
-
SHA1
4c6756fa52461af9636c65f9ca54c78558e856cf
-
SHA256
2196370b2ff200257c878be464df34abcbfdf022bf18175b6954ec16587e07c7
-
SHA512
c9683205478a759b47f5f6a7ec2b415f1b3894a9f3e163ac7cfbd782e08d7d2dc0684a7515b4d0b3ff34e63e502be17008e3742c469702d61da442a701f6e7ef
-
SSDEEP
768:bJ9f7PvXVKvAzcW0bOt59NPrwy8FzWndxYYBs5UuAtJ5VyXsySS6QK5K5V0D1/6:bDrvlKIICt596y8FMF6Uf5os/Qx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb5749c7dcc051fcba6c27a3a7e2cfb_JaffaCakes118
Files
-
1eb5749c7dcc051fcba6c27a3a7e2cfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ