Static task
static1
Behavioral task
behavioral1
Sample
a20f15c1c9c8223763b91b4c178ed9a3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a20f15c1c9c8223763b91b4c178ed9a3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a20f15c1c9c8223763b91b4c178ed9a3_JaffaCakes118
-
Size
22KB
-
MD5
a20f15c1c9c8223763b91b4c178ed9a3
-
SHA1
0c604eca411ba3b5aa92d88788e294f22f9041c0
-
SHA256
8d18c7c3bac3721404f23c9dbf651388724665011cf9394b909c07b445bab4df
-
SHA512
3df00667b9e40aee3844a8aa6cede5e6f54f4a7fe56f21edcedc339f3f85a509aa737ecfaef55a03fed91c646bbd224c79bb3b8f42b52255f3878604295ef34f
-
SSDEEP
384:vcacdRS4bDhaj1A2c+IfoEB2Ad/HgS+p8Sb3GPlnrnPjBk:UTdE4bdEA28Awzv4p3wFrPjB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a20f15c1c9c8223763b91b4c178ed9a3_JaffaCakes118
Files
-
a20f15c1c9c8223763b91b4c178ed9a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE