Static task
static1
Behavioral task
behavioral1
Sample
0cd4d1bd6016026c310f10c712f64b91_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0cd4d1bd6016026c310f10c712f64b91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cd4d1bd6016026c310f10c712f64b91_JaffaCakes118
-
Size
354KB
-
MD5
0cd4d1bd6016026c310f10c712f64b91
-
SHA1
7e58cf7f6444eaa6db3eac029c4002e556b973df
-
SHA256
9976f1b17e43354f4cc7a170dca193906d9e02ca8320efdf5008610f04159c3c
-
SHA512
d4b2f7f70ab6e776e0e048b94d9bc1f022e4f5aa65ae4be471164f486105179b5859bb3e3da7daf8210adde71918e76dadbd51c02f4a69579566f5097dad8800
-
SSDEEP
6144:7q3KI59Rq1SqYi3vtk4eZ30tbtlBHKde6j7NvGVJ9VvRzMwNuOhmoGWrtqG+Gvln:e3KITR8VJQV0SY4IJvNTN9vqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd4d1bd6016026c310f10c712f64b91_JaffaCakes118
Files
-
0cd4d1bd6016026c310f10c712f64b91_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ