Static task
static1
Behavioral task
behavioral1
Sample
ce96b866a6c6e58a2ce1153861843d5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce96b866a6c6e58a2ce1153861843d5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce96b866a6c6e58a2ce1153861843d5c_JaffaCakes118
-
Size
571KB
-
MD5
ce96b866a6c6e58a2ce1153861843d5c
-
SHA1
f6330ed71f1a1b9412b298673acb546de510c93a
-
SHA256
5532ca93b7a11d623601ef3a3ec607a44e2d64eaa8241d7c89e0c36f698549c6
-
SHA512
0a9f99323a39c0d36aef1db5e8e1e8e8f486b36473f5354825598f6fb26579f1c0b677ca7c80f56801e21a134aec26b02ca2a1e6e702d166ab7dd4c16b20d842
-
SSDEEP
12288:L9Hp6RPhYCV74nHDBjzz6d7iPRWdd690/yoXU5+8:n6ltV7AjhO9iPR0I9WE5+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce96b866a6c6e58a2ce1153861843d5c_JaffaCakes118
Files
-
ce96b866a6c6e58a2ce1153861843d5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ