Static task
static1
Behavioral task
behavioral1
Sample
cdf0b36306e5e2977e3ff992cecab009_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdf0b36306e5e2977e3ff992cecab009_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cdf0b36306e5e2977e3ff992cecab009_JaffaCakes118
-
Size
84KB
-
MD5
cdf0b36306e5e2977e3ff992cecab009
-
SHA1
5170aec334b7081846242caae9d732843a468cca
-
SHA256
13a04d362fb091df733603569fd50f93bbaa62ae94dc3a84be0ea854baeb2d17
-
SHA512
f66a81e0d0e02113e989923907821f8edbf318f9a157efd7265582b945127c43fb9143d478b4e0a5ee46616646b140e42d49f5edc835c0215cd5914dd75aba17
-
SSDEEP
1536:NG2EnTramCVTJ10emyhVuFyiuxUi/6ZVS2xOW7QaNVNILOGgN6VsUv:NynvBCVTJ10eh0funidUihVKgosUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf0b36306e5e2977e3ff992cecab009_JaffaCakes118
Files
-
cdf0b36306e5e2977e3ff992cecab009_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 168B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ