Static task
static1
Behavioral task
behavioral1
Sample
50282da5093e3086fcde377c5e8e28bdJaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
50282da5093e3086fcde377c5e8e28bdJaffaCakes118.bin
-
Size
264KB
-
MD5
50282da5093e3086fcde377c5e8e28bd
-
SHA1
f8468c9953686b0b77dfb6949866c68b628ce73d
-
SHA256
ca49aa362621679944ff2bb5c323dbb64ef5f0364dff1be6168c0657962296ec
-
SHA512
7a60e543a0b918591c7dcec8286175ce3c2e746c18055ac5439a9790469b9152ab2f50be6dc7d8f70d0b4002e7b51a9e32a685befb83dc971311deca65c46818
-
SSDEEP
6144:G/HhXZxNiTGAATtFH0zpVVDkYx7pvX9GD:iXZykBFHApVVLFdXsD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 50282da5093e3086fcde377c5e8e28bdJaffaCakes118.bin
Files
-
50282da5093e3086fcde377c5e8e28bdJaffaCakes118.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ