Static task
static1
Behavioral task
behavioral1
Sample
063e2448e0d03bff013da7f94e39c044_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
063e2448e0d03bff013da7f94e39c044_JaffaCakes118
-
Size
401KB
-
MD5
063e2448e0d03bff013da7f94e39c044
-
SHA1
6480104be4920db94d8cc4d05997890b068f3bdb
-
SHA256
3623b89a79d44b474e8793c332fce0aca748a28683350002b3195456936f708a
-
SHA512
4f90a97e24ad025d1307be108d59985b93095f7eb1fb1ebd093939c3a5a411a8a2dd58cbc222f503e3af579d43015ef6dcb8f4c36e35c571df6183da95b71f6e
-
SSDEEP
12288:oBK4kFw5q5QRgvTKzaIMNx6rmXSVstQ53BW:HJFwr8KNIxmJd8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063e2448e0d03bff013da7f94e39c044_JaffaCakes118
Files
-
063e2448e0d03bff013da7f94e39c044_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ