Static task
static1
Behavioral task
behavioral1
Sample
631c9d33ff3a8d714864fd18e1dbf725_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
631c9d33ff3a8d714864fd18e1dbf725_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
631c9d33ff3a8d714864fd18e1dbf725_JaffaCakes118
-
Size
2.7MB
-
MD5
631c9d33ff3a8d714864fd18e1dbf725
-
SHA1
d56dbf573cb6082eea1f7b4469e8a5f2be6c75be
-
SHA256
19e60fcde1b38e7fd6274e33a8defc1658677800d4a85a2c788decc600a36e66
-
SHA512
86be94c10eecf2c76b5b92dec3bd8ed188c4be0a8b2b3078131ee037185ecb58a37aa99c3df2767800c4c1272f9dc8440613dccae5e5d9e21331a1051e8f9ee3
-
SSDEEP
49152:RAbx0lVw1ug+yPmu1YNTxNMUWHNIFS3v+4X3PMkMNI/JhM:RAbxL1ug+yuu1Yp7MUWHNHqkwI/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 631c9d33ff3a8d714864fd18e1dbf725_JaffaCakes118
Files
-
631c9d33ff3a8d714864fd18e1dbf725_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ