Static task
static1
Behavioral task
behavioral1
Sample
863b068c64075163f7f3f00783a037f8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
863b068c64075163f7f3f00783a037f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
863b068c64075163f7f3f00783a037f8_JaffaCakes118
-
Size
154KB
-
MD5
863b068c64075163f7f3f00783a037f8
-
SHA1
2fc944da69550726e8c4003bc0fc721d365c2e1b
-
SHA256
1ab9e25a7c430042e3ffeb0f5ad8cff551807f9410f94592949aa1a970acc248
-
SHA512
a7ab325c37d5868c6cf4be6444429e80c73cf4518c290b5032556003403f52ea83738982bb6bfc443a94f1a710b24bfbbb440fa512d37a99256d448dc3b3acd5
-
SSDEEP
1536:SQEXHdAqWa8GtQVaCb0awEDOZwdGSP5y0pOA8jDuzVAnuku5sJai1koIOiLqyobs:Sh3MVaCbPRPMuxAnukzYkyo3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863b068c64075163f7f3f00783a037f8_JaffaCakes118
Files
-
863b068c64075163f7f3f00783a037f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ