Static task
static1
Behavioral task
behavioral1
Sample
214a38eb2910ab2bcb10f083e2c29b42_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
214a38eb2910ab2bcb10f083e2c29b42_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
214a38eb2910ab2bcb10f083e2c29b42_JaffaCakes118
-
Size
1011KB
-
MD5
214a38eb2910ab2bcb10f083e2c29b42
-
SHA1
856588de89b1915c86fa51bbad3f0c7646d71b41
-
SHA256
0fec6e64efc0ae995a789b5833e95b8235d68c424ff7f3ffdc4c5b6d30520e24
-
SHA512
a23cb99ef1e8a18b1ec781923d19ed73fd15b0e86732998b4fce634e8b7fed1631bce379e6b141d27fbeda1dd69865530ba8a9ce7ea06563336a13c0a20313c0
-
SSDEEP
24576:iTkbpRC0uRnuB5nFXCnbHmenOXCgxRKP2S2agCLcFqn+LRoVdnn9pcBoLb3:iT0RpuwB5nFXCn7POXZxRu0CLKG+toV5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 214a38eb2910ab2bcb10f083e2c29b42_JaffaCakes118
Files
-
214a38eb2910ab2bcb10f083e2c29b42_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 789KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ