Static task
static1
Behavioral task
behavioral1
Sample
bb11e35072363478b18a8b0292147092_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bb11e35072363478b18a8b0292147092_JaffaCakes118
-
Size
495KB
-
MD5
bb11e35072363478b18a8b0292147092
-
SHA1
979ae90acc94a26907d56d678582ee2589fb6062
-
SHA256
1dfb35e54bddd588856b590bd79fca18a3c3df07ba2de84419485a30cb90fa25
-
SHA512
3f67ab582e13cf3c3ea88882abc44fefb3517f7a47371b901cc08a391824ecb13e3708b1851bbcd09e3e3d14b8cf3afb775df9ad34329bc5ce0a756d3ebebf1c
-
SSDEEP
6144:3HChWQaX59AuHc3vfhJE+JqJsakmgc8WcY1:3HjZ9cDRUkmgc8Wv1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb11e35072363478b18a8b0292147092_JaffaCakes118
Files
-
bb11e35072363478b18a8b0292147092_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ