Static task
static1
Behavioral task
behavioral1
Sample
c027330627d3516a18ed5f4f06d048bd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c027330627d3516a18ed5f4f06d048bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c027330627d3516a18ed5f4f06d048bd_JaffaCakes118
-
Size
433KB
-
MD5
c027330627d3516a18ed5f4f06d048bd
-
SHA1
55750304bc107b0e591096b9e5d59a92763de50b
-
SHA256
df0b0e695d059515f264361500dfb9e96d70ed578ad95762cda419de5191397e
-
SHA512
ab7e91ccb1ecd3fd26f1ef06ee5a3a1f2b47684c99a74bc52f5d5a738cbe771d2e9dea760ee98619187e3844eb770f2f62ad26c5227f6e184f9cc9aa5cb0982d
-
SSDEEP
12288:JeFJ5lWiLuGeUwX/C+U25icxdzjVCddIMH82qoNg:cFf7wg25icfzjVC0m8Zoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c027330627d3516a18ed5f4f06d048bd_JaffaCakes118
Files
-
c027330627d3516a18ed5f4f06d048bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 27B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ