Static task
static1
Behavioral task
behavioral1
Sample
b6e0ae7953255444245fe631bed49e65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6e0ae7953255444245fe631bed49e65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6e0ae7953255444245fe631bed49e65_JaffaCakes118
-
Size
45KB
-
MD5
b6e0ae7953255444245fe631bed49e65
-
SHA1
ff990768039308be9d07fc1f8cd9300aa1b62213
-
SHA256
8cb4c536d5f081181e1bf232c915467c15b1eabb6e496c2d013fa7f5c67601e3
-
SHA512
833c16f3700773aa58ff99e9885f1ecaa600ec1cd8e2b1325bf3bdfbf8ccb73d5d02918b38b0e47d16d517d24ececaf219179c24dc051c2df83f7f5bb4cce177
-
SSDEEP
768:f7HeQF2oQ5obIWVG06INg11tSBY97oCNwfS/6Pkue1MqqXl3HWqT2Oug+pM9SpEM:fTeQF2H5KIQXq17SBWNAS/6PkuSMDXtQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6e0ae7953255444245fe631bed49e65_JaffaCakes118
Files
-
b6e0ae7953255444245fe631bed49e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ