Static task
static1
Behavioral task
behavioral1
Sample
632ff84ea675883dc7ae0bbc25eb60cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
632ff84ea675883dc7ae0bbc25eb60cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
632ff84ea675883dc7ae0bbc25eb60cc_JaffaCakes118
-
Size
1024KB
-
MD5
632ff84ea675883dc7ae0bbc25eb60cc
-
SHA1
0ef551395555bde0470d91019a26cc48478515ea
-
SHA256
1e7cc1f7999bd00b0d3def4879b80f75d1c849bf1aec0567b042dad9e2c03af9
-
SHA512
c40f09f513db68f4ffea91c8192ee15b0b78a840785c4035182d1adf99c4d023473e88d3510f32f497a9e2c62eec20d99571a1fce9ba2aec295520b190743de5
-
SSDEEP
384:8/LouqWa1ZM7R2nbEbWAd0sUmapCbYdkZMeRExECDpNNsUYeKdddddGdddddbDFe:8/UNnZMW0UdpI6eREuCDe8Dsrg8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632ff84ea675883dc7ae0bbc25eb60cc_JaffaCakes118
Files
-
632ff84ea675883dc7ae0bbc25eb60cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ