Static task
static1
Behavioral task
behavioral1
Sample
01107d157b83025aee2c27e77657aa53_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
01107d157b83025aee2c27e77657aa53_JaffaCakes118
-
Size
537KB
-
MD5
01107d157b83025aee2c27e77657aa53
-
SHA1
98d8a12a99602f0366e8fd38ba1aaa64dca7c00d
-
SHA256
d7d34f7d3fac0179781b634c476705aa3984aa336f6f82eccbcf3d25f0da0175
-
SHA512
827fa801032a28bfc3273a8b6fc47901a5fa91da6daf46bd714332e9ba39ea1bcf30829542f7dfa032ef23d500b5bebe71b05f81f9d5a8d14afd5070a235c516
-
SSDEEP
12288:RYUOzreQCFlsSPRy3UIKwSGw6MVvjrcwxpIzW/OMZ0:RQCFR9r/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 01107d157b83025aee2c27e77657aa53_JaffaCakes118
Files
-
01107d157b83025aee2c27e77657aa53_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ