Static task
static1
Behavioral task
behavioral1
Sample
b1454e3ab2873bff81275a195a5d5969_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b1454e3ab2873bff81275a195a5d5969_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1454e3ab2873bff81275a195a5d5969_JaffaCakes118
-
Size
269KB
-
MD5
b1454e3ab2873bff81275a195a5d5969
-
SHA1
c29bbcc88f9bcbad24dc2c94ba2d9ce8fc4601ca
-
SHA256
0ac66096e78d187e2da03c16c55ce8aa3b12c4c54caeecbb837d3a3187035054
-
SHA512
c793f00466a960bb98d9da314f7ba5060023c108f5d11dbbad9ca7642a5becde09e70461dda2da305173a27f8df37f0a9db796c2f28d06dd71f2bf7b0c96a122
-
SSDEEP
6144:d5kwtZCyJD+N1RIRxtVLRhAPFDHPiQRSpF:cwtZH+N1RCnlEHaQR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1454e3ab2873bff81275a195a5d5969_JaffaCakes118
Files
-
b1454e3ab2873bff81275a195a5d5969_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ