Static task
static1
Behavioral task
behavioral1
Sample
09d308249c0705758dc7fa87ab635460_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09d308249c0705758dc7fa87ab635460_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09d308249c0705758dc7fa87ab635460_JaffaCakes118
-
Size
168KB
-
MD5
09d308249c0705758dc7fa87ab635460
-
SHA1
8a197d6e3d8a2b907a306a92590dc085e38358b8
-
SHA256
751a59dcb8e7edbdccce744450f09bd241f2beb02b5b81bbe519f625877351de
-
SHA512
edabb1559d9bfe72f86076a14f982bead711d7f54c5666f5bff55a5303b61558e2dc716a311ac8d6d0dd87c57333ec799965f0d5d7a4eb5ba88c79194bf54db7
-
SSDEEP
3072:Iyn6eTDayesQBS/DeX8VkAgj+QfbmCTFCEvIW9VOyJM+7fgwTte9oTv4v:QeTDarpS7vDgqyLIEHkyJMKIwmy4v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d308249c0705758dc7fa87ab635460_JaffaCakes118
Files
-
09d308249c0705758dc7fa87ab635460_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ