Static task
static1
Behavioral task
behavioral1
Sample
4002819cd3c0ef4a64f7c5e000dc8b75_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4002819cd3c0ef4a64f7c5e000dc8b75_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4002819cd3c0ef4a64f7c5e000dc8b75_JaffaCakes118
-
Size
984KB
-
MD5
4002819cd3c0ef4a64f7c5e000dc8b75
-
SHA1
6d9905dd7f3d846e87a96d0d9018792cfb6acb6d
-
SHA256
ab01c300436d929870f93714fac09ebc8e3ea8374f0fb2f3dc2c841b90f6d9e6
-
SHA512
6326b6d945365b4e19102ad7b5baf346524bc182a138995bffd3d4f3fb4e9e04c6db05890a9142b4ab476f9179418a7d96bd4e406d02445aa445d0afecd59fbe
-
SSDEEP
24576:zieQhMMMMVxOgKjTieQhMMMMVxOgKj5Yf:zhQhMMMMVxOzjThQhMMMMVxOzjE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4002819cd3c0ef4a64f7c5e000dc8b75_JaffaCakes118
Files
-
4002819cd3c0ef4a64f7c5e000dc8b75_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ