Static task
static1
Behavioral task
behavioral1
Sample
8385c63837f8f09c9b5b5e45fe69ef24_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8385c63837f8f09c9b5b5e45fe69ef24_JaffaCakes118
-
Size
489KB
-
MD5
8385c63837f8f09c9b5b5e45fe69ef24
-
SHA1
ea659586a780a9c8d25448a0e5ffdae894cae0c3
-
SHA256
cdfe2be6bf87199b71f4659aae064a8a7902d925af54500194352f09e1fe407e
-
SHA512
e3f6d83d1d324a848c9e794dc1810635655743ae61d1607db13bfb21618efe8e6605e9369860db4d4c72651379821e1c9a736acd9e3aa0cbb18c1ac85b48effd
-
SSDEEP
12288:czRfbpaY1MhE0nhe5a3mqC6KGXRHyDdUix2FAb:Zbh4wC3GXRShpb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8385c63837f8f09c9b5b5e45fe69ef24_JaffaCakes118
Files
-
8385c63837f8f09c9b5b5e45fe69ef24_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ