Static task
static1
Behavioral task
behavioral1
Sample
a03e2a272fb27910e613a720eb78f6a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a03e2a272fb27910e613a720eb78f6a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a03e2a272fb27910e613a720eb78f6a1_JaffaCakes118
-
Size
370KB
-
MD5
a03e2a272fb27910e613a720eb78f6a1
-
SHA1
5b07419840784c315e7ae03df16b41b80dc6638a
-
SHA256
5797b96bc18030ff62c173c95543087d11e94a4b1536cc5aafe156c1cd0d26be
-
SHA512
50502a2c8a14daa49b035530dd98e91b9ecba45573937a5e9e102990b349d2148c7009cfe614a729c99ecfa72d2a0859cad6583dd5a846d57ec80b3e53eb1798
-
SSDEEP
6144:KhIS7F1B4ScaSxbYRCwZ0BC74TdaZhKOBrU6nocgjjmsrubp65voCeFh5wwtIl2g:alX7bCw6BC78an7fnx58RvoCeFlXf8I0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a03e2a272fb27910e613a720eb78f6a1_JaffaCakes118
Files
-
a03e2a272fb27910e613a720eb78f6a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ