Static task
static1
Behavioral task
behavioral1
Sample
0959271d7bafa1614fbea7b997b160b6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0959271d7bafa1614fbea7b997b160b6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0959271d7bafa1614fbea7b997b160b6_JaffaCakes118
-
Size
60KB
-
MD5
0959271d7bafa1614fbea7b997b160b6
-
SHA1
a73d5df2404d5f6583180b1dfa4528e575cd939c
-
SHA256
912cee5fe5c80a11f8540e7ef3f8f35d201267c6a8db53afb19ce6ae9118e486
-
SHA512
6ff1443368d036a7e66266a1bc0976ef54784c7873e65ee938d0d9d772ce8e98e5aceb962b1e54a63c2b03e86e3af575e4a83b946a263fb14f8b69c7e95be0fd
-
SSDEEP
768:GWZzhRaVhKAu7WO6gygEC/zuiKJNPfgiGZtMX66ibaWUn:XZl+AqirY8iGZG0aWW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0959271d7bafa1614fbea7b997b160b6_JaffaCakes118
Files
-
0959271d7bafa1614fbea7b997b160b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
75d9fd67b76d2bccda6f4aac4e9ef245
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscorex
_CorexeMain
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ