Static task
static1
Behavioral task
behavioral1
Sample
b0afc739dec2f50fe8a004ba6f554fbd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b0afc739dec2f50fe8a004ba6f554fbd_JaffaCakes118
-
Size
349KB
-
MD5
b0afc739dec2f50fe8a004ba6f554fbd
-
SHA1
97ee1ad4905ec209243e46bba146b4591d2870c1
-
SHA256
c4c87d25f8787e2cef25441256275eab7f9ba6af42c7c6c488936878b3b8522f
-
SHA512
6faa924329228a063d89357507b6fb8c54774630e956240e739780d930d1d99ccd96e75f871db7637b9083eb05b59f95726df56fcdd0d666262ba004f77c4b36
-
SSDEEP
6144:1Kx3W4P4KwV+7F9KGooAckUawr7QmNKohOx92h3EXy6INjSmKoPB:kxmmFgRcpak7Q+K4g92f6AWmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0afc739dec2f50fe8a004ba6f554fbd_JaffaCakes118
Files
-
b0afc739dec2f50fe8a004ba6f554fbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ