Static task
static1
Behavioral task
behavioral1
Sample
c75836b63b3e50ec688f3f87562e3317_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c75836b63b3e50ec688f3f87562e3317_JaffaCakes118
-
Size
598KB
-
MD5
c75836b63b3e50ec688f3f87562e3317
-
SHA1
3a656a65cc3cab6598cb1135ab08362e69fbed81
-
SHA256
0e8588ab07a318a02ff32d0815fcff8150534e3ae93ed79fbc6f9a63d0f93c90
-
SHA512
deb9002bf06aece12a731f137533332e26b0fd3112ab7d0c2e706a8362021d6ee094d5028b71d98548c484d2e53fafd193393ddc42673eba6fd136ef107fd4a7
-
SSDEEP
6144:EjtLBZeu8MtY8LpxKzBHZNvMXc/GwBqJ09libM/C0k8j5NPF:0iMCHZyMewca9lc30kW/PF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c75836b63b3e50ec688f3f87562e3317_JaffaCakes118
Files
-
c75836b63b3e50ec688f3f87562e3317_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
. Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 347KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ