Static task
static1
Behavioral task
behavioral1
Sample
979766376499dbcd64efcfbeaa31548e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
979766376499dbcd64efcfbeaa31548e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
979766376499dbcd64efcfbeaa31548e_JaffaCakes118
-
Size
572KB
-
MD5
979766376499dbcd64efcfbeaa31548e
-
SHA1
ea171016bb11882ec3d335bc52f53b3d72844ff0
-
SHA256
3e2ffd1ff49fe6a8452aaa29788f6cf7b5782d6e484a242126bab99e18478cb7
-
SHA512
9045a8ad9bf39b079ca361701c45dbfc3622179533f245988105a4f8d50a7159a357f0dba15e8fed3885abf045a9e68fdf1baa358805266d20eb00a5eeddc3af
-
SSDEEP
12288:B9vCVXp4IKXdHU1/jLnZkGTT2Saeva6QDQ8kGV+KfaPoJ49g4:aLhKjm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 979766376499dbcd64efcfbeaa31548e_JaffaCakes118
Files
-
979766376499dbcd64efcfbeaa31548e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ