Static task
static1
Behavioral task
behavioral1
Sample
acee7593c0fc14c07bfe073de5fcfe04_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acee7593c0fc14c07bfe073de5fcfe04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acee7593c0fc14c07bfe073de5fcfe04_JaffaCakes118
-
Size
451KB
-
MD5
acee7593c0fc14c07bfe073de5fcfe04
-
SHA1
f52c6ab8ba0ceb06da1d1bcaf7590273c8bcfb58
-
SHA256
d86e9a563e2cd368a81b8678bf87ca4dddb9d5dda1c131829b0aed75898f7b16
-
SHA512
59dece96fc6467c22bb9f6918c3fc92e109b88e1017016456f62aec5361976d3c28d490a1e08354d5e3590ab4d7d497c6b3fb2b93a843e09b8d119efe0c1255d
-
SSDEEP
12288:A2WSGaKoDZU9YSoABNIiFkFCMZJevwp0:A2WhajZbnWFkoaJe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acee7593c0fc14c07bfe073de5fcfe04_JaffaCakes118
Files
-
acee7593c0fc14c07bfe073de5fcfe04_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 446KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 137B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ