Static task
static1
Behavioral task
behavioral1
Sample
b68b635cc5fb87f962d4f1ab5fdd3081_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b68b635cc5fb87f962d4f1ab5fdd3081_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b68b635cc5fb87f962d4f1ab5fdd3081_JaffaCakes118
-
Size
949KB
-
MD5
b68b635cc5fb87f962d4f1ab5fdd3081
-
SHA1
30eda1f939e8003c61fe75a84a2659adb24a727d
-
SHA256
19d22c408e0fb679a57165f3eadc074432be75829f298b5e9433f322d8129ddb
-
SHA512
c7cc4379370fcf4454778a89fd9900423d09b964a1b57f2f77aabc341c7e1a9953be26c10ef856dcb101069d4a3797b8f00fd21f974ccf93b1c99e9b5adf84c8
-
SSDEEP
12288:0pUWu2ygrzVNMeL01p07kxc9DSKfpFkTSGz9cxqKbzTHvjY4mn+OAJYmrEvBZf2w:oCgr0c01iDSKRESyy/7Nmnyav+UgSLx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68b635cc5fb87f962d4f1ab5fdd3081_JaffaCakes118
Files
-
b68b635cc5fb87f962d4f1ab5fdd3081_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 945KB - Virtual size: 944KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ