Static task
static1
Behavioral task
behavioral1
Sample
6346e5ff33557bdfd9e49cf426301ed9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
6346e5ff33557bdfd9e49cf426301ed9_JaffaCakes118
-
Size
627KB
-
MD5
6346e5ff33557bdfd9e49cf426301ed9
-
SHA1
4be4ee7ecb4c57bdba3d3816a2784c49210ba86e
-
SHA256
2beb263b73fb859b2b53690ff33d82cc103def9cb7de192e6bfddd6f413b961d
-
SHA512
f3e3fbd3efa8e26e32df0b98c3feee0b1858a9dfb693b97c669373fad702928bdad206f2b2474a9c28f581ca1c4ade8564a43594f274a02d6b73b2c28f7c8218
-
SSDEEP
12288:gKcjMpYBbkM11hMLWC7OUoGA4JU4Cx3hgjl:g0+ZkqHMLWC75NA4JUIl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6346e5ff33557bdfd9e49cf426301ed9_JaffaCakes118
Files
-
6346e5ff33557bdfd9e49cf426301ed9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 621KB - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ