Static task
static1
Behavioral task
behavioral1
Sample
272d6fb170e0540f749369a8947f5c11_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
272d6fb170e0540f749369a8947f5c11_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
272d6fb170e0540f749369a8947f5c11_JaffaCakes118
-
Size
586KB
-
MD5
272d6fb170e0540f749369a8947f5c11
-
SHA1
4b9e071e51650dd520f1eb16a6b57b3a04de6d03
-
SHA256
4bf54ffc6bd9a7d1e2210409ef1094aab3094290edadc22f3a4fbe8e15f2c367
-
SHA512
f253833666e54f20d873ad679eda07d7281a624d4a58216d9d526fd6d5cc052ec104c2d83901aae285e1974f1c672bb58352ebab33ea9e92e84380188a8c6de8
-
SSDEEP
1536:iR/8A9mHeO0n8sMsCrs8VUD5b80TiQKRt:k/T90Qn8UCnVUDh3TibRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 272d6fb170e0540f749369a8947f5c11_JaffaCakes118
Files
-
272d6fb170e0540f749369a8947f5c11_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 579KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ