Static task
static1
Behavioral task
behavioral1
Sample
32f23b986b13a0640827ebea0250d04c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32f23b986b13a0640827ebea0250d04c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32f23b986b13a0640827ebea0250d04c_JaffaCakes118
-
Size
2.0MB
-
MD5
32f23b986b13a0640827ebea0250d04c
-
SHA1
e273ed4006351141814cf90df96d4c72e0bea019
-
SHA256
1b1e09316a61a41427e6a51eb889bba9306f7040bcbe6c45f77ec76563635ff8
-
SHA512
5bd4c30166794d09db7cc355e474bb3315f4d8fee151f0a7bbcfa3fbc9dfcb2a9f042306b1b7044c79d590ae3f9df837aad660160bea3b45813171b368b8afe1
-
SSDEEP
3072:IYUyOSzJ3+G/NTKTjyXGudzXzW7oly9pioCMqeoRB:PU1wp+G/9KHyXGWXzE0y9UoXqd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32f23b986b13a0640827ebea0250d04c_JaffaCakes118
Files
-
32f23b986b13a0640827ebea0250d04c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ