Static task
static1
Behavioral task
behavioral1
Sample
0b468f855e981de015e8841b6d1afb64_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b468f855e981de015e8841b6d1afb64_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b468f855e981de015e8841b6d1afb64_JaffaCakes118
-
Size
52KB
-
MD5
0b468f855e981de015e8841b6d1afb64
-
SHA1
3ccc1fb13da51da6ca82446b399116b3d3843c92
-
SHA256
13fb3c4ac736430e26787d06f3c0794787b4285d0bbdf9beef2b6e17ee875040
-
SHA512
0c9f88518f7177541798552afb51744e57a9cf71864352570521cc0289c91f50a7196def3e3c94beadd48b28e9f0554e0d06715dc06e503ddfd775da9b904324
-
SSDEEP
768:iphD6+cK+mHIMxd7+XMa/r2WPd+YQtwsNgQVFs2scnNJlvQKqJxOVvTVlpHm:iphWDCZkMa/r/+BGogQPNJ5QKqH0BHm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b468f855e981de015e8841b6d1afb64_JaffaCakes118
Files
-
0b468f855e981de015e8841b6d1afb64_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ