Static task
static1
Behavioral task
behavioral1
Sample
ad912c1f40bc66a4b5fcf2f092eca70f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad912c1f40bc66a4b5fcf2f092eca70f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad912c1f40bc66a4b5fcf2f092eca70f_JaffaCakes118
-
Size
558KB
-
MD5
ad912c1f40bc66a4b5fcf2f092eca70f
-
SHA1
d4463f6d864ab735d3738a5adb7c8945e11e723b
-
SHA256
aae89fb44a080d243b45357de610bfba1d0c58f9aa22fbeb2bc814b5e4e279b3
-
SHA512
a276525969f2731802a88ffaf3ef7dd3cd1f4947abcd9730b0a196d328479f457abfb1d27392e616f568ab4b3479ffa12b33cd521208e135c7adb5c142cd2a54
-
SSDEEP
6144:8l0DaHyxsKrTYBIDjb+HZMXT51tvXMqG1RJ6fmCEAouRNQuaWBFg0uNGZLq0DjW9:gKzTmWbC6Ltv4mfVouRmuaide0Dj6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad912c1f40bc66a4b5fcf2f092eca70f_JaffaCakes118
Files
-
ad912c1f40bc66a4b5fcf2f092eca70f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 419KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ