Static task
static1
Behavioral task
behavioral1
Sample
329fe5c70f7a8237c3bfa67a2be74906_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
329fe5c70f7a8237c3bfa67a2be74906_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
329fe5c70f7a8237c3bfa67a2be74906_JaffaCakes118
-
Size
104KB
-
MD5
329fe5c70f7a8237c3bfa67a2be74906
-
SHA1
2c14df36c4491153ec70a1541c14a08f18a975ac
-
SHA256
8d1b9397833d660a0979108bf5227c207d9d360aa5c6bb17d8bbb307e9252291
-
SHA512
8aa386d7f89dff0e520e4bb62c70f64ed3f041446242ed2c5964af0eb4f9ffc9d31e83a09885e75cf26a8c046c8e072ca32bd921902b33f98ebef3a3668b62f7
-
SSDEEP
1536:TEq95U+ncISGKz1E9SQZnYNxVvjzP3Ejbs9SuYVAtUer9OwvqF4zN4I:BT1cI2E9P989jjOuNier9PCFayI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329fe5c70f7a8237c3bfa67a2be74906_JaffaCakes118
Files
-
329fe5c70f7a8237c3bfa67a2be74906_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ