Static task
static1
Behavioral task
behavioral1
Sample
a96c34b3471644261b17fabcff7678ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a96c34b3471644261b17fabcff7678ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a96c34b3471644261b17fabcff7678ee_JaffaCakes118
-
Size
502KB
-
MD5
a96c34b3471644261b17fabcff7678ee
-
SHA1
dbd289839e71e4a65b6e5b3349b6f1015d4f64fd
-
SHA256
616caf781dfc2642ee884491cd34be7aff3a4df2b64afad2143118c6afd76564
-
SHA512
af35a4403285db1ffeb3a7075121a2c03a1652d355217ab322eabe0d20663da1271dcda9332ea0bd06358a12bffdba50f5b125bef269a3b15198a023c29fbb39
-
SSDEEP
12288:6E9H3Z8yWhQHnt1UkGAlC/rvxunubUN3cUlmIhPcEwEe1/:6ElJEaHnt1gAlC/rvx/bUNJ4I1cEwEeF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a96c34b3471644261b17fabcff7678ee_JaffaCakes118
Files
-
a96c34b3471644261b17fabcff7678ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ