Static task
static1
Behavioral task
behavioral1
Sample
447a13d6da3b2878a3260be32228503b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
447a13d6da3b2878a3260be32228503b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
447a13d6da3b2878a3260be32228503b_JaffaCakes118
-
Size
6KB
-
MD5
447a13d6da3b2878a3260be32228503b
-
SHA1
1cdf73c7e37b496fe39e0c68bdc6586b7a241851
-
SHA256
f96baaf0454491de6acc9e38160f9056e4001d8cc96098e1abb99ce4d7d1dec8
-
SHA512
f343ab59a67bf2a438fac1c82dab500c16be9a9fcce1d09fee15d305f90962522d6d76542e463427525435c5d2be1fcfc4641a94cb59328e2b995fb0431db58e
-
SSDEEP
96:zi+oNEIz3hQyjH7VojmpDsVBwK1VRhZqUVT9KX14fSzNt:zYR9jbZ0WK1VRhZXVZKWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447a13d6da3b2878a3260be32228503b_JaffaCakes118
Files
-
447a13d6da3b2878a3260be32228503b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ