Static task
static1
Behavioral task
behavioral1
Sample
670604384c6ac0c1abf169a39cfe2ef2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
670604384c6ac0c1abf169a39cfe2ef2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
670604384c6ac0c1abf169a39cfe2ef2_JaffaCakes118
-
Size
1.6MB
-
MD5
670604384c6ac0c1abf169a39cfe2ef2
-
SHA1
cd3b3b9f79c61169aa90e7d88da92d10ae40d681
-
SHA256
6ea0b4b6e3ca9d4d18a42d8372ce6bb6add017c3358d5aa12a557c5d2613c20e
-
SHA512
5005624f6c9574aa81b556b62a81eef28001b348263fa89e8e45b3318d34add5aa89f54477af78aa71fa7de21dac451945cbaa8d4b9f40a85fe2d5fd7738b685
-
SSDEEP
24576:alXuis38Kp14QRtWIJVECRVcjxGSaalS9EWcUc5wrfuihyZJ+cVDpyK7uIWHqE67:alfs3TvF7ECsU598Dh9Wdd6SJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 670604384c6ac0c1abf169a39cfe2ef2_JaffaCakes118
Files
-
670604384c6ac0c1abf169a39cfe2ef2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ