Static task
static1
Behavioral task
behavioral1
Sample
4520f8a3406370aadcfb3f5dc0ea17b0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4520f8a3406370aadcfb3f5dc0ea17b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4520f8a3406370aadcfb3f5dc0ea17b0_JaffaCakes118
-
Size
21KB
-
MD5
4520f8a3406370aadcfb3f5dc0ea17b0
-
SHA1
a8232fb3ca3189ee65558970da92a8667d08429d
-
SHA256
fad349df653ac0f29fdf3e9347e1cb828c0ef50b23954927cc71a5c628b16e4e
-
SHA512
3a6c5b2ec650972255aeacaf832e81628fbb3a1e44763469603fe85db491ef991b41551ff6972664a27d55bf09a81c4df4e65e800a5d8de99141e220f8ad9f6d
-
SSDEEP
384:Jsc2rklY5SFTBRgveQJSdyu+bbuyyxkRsEmhqlwNbD11W++W:JBMklYkPRgWBinuy4kKEmht7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4520f8a3406370aadcfb3f5dc0ea17b0_JaffaCakes118
Files
-
4520f8a3406370aadcfb3f5dc0ea17b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ