Static task
static1
Behavioral task
behavioral1
Sample
cf0aa4352ec27ccaf258a8cc33d9ac4b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf0aa4352ec27ccaf258a8cc33d9ac4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf0aa4352ec27ccaf258a8cc33d9ac4b_JaffaCakes118
-
Size
287KB
-
MD5
cf0aa4352ec27ccaf258a8cc33d9ac4b
-
SHA1
baa82dc3d0c0e6a0a4359c3e30b71a2dcaf4fad3
-
SHA256
e540c3a0e39e1419adc96092d0b4ce33cee9e7669f3075f238ca4c675047d536
-
SHA512
130a69632e45dcdd66506d47024f09f56b040d5d0116af91749ecdd2fd04d5669050fb602c6e315a258e5bdcd6dc56802b0387d13344d0efa911107d87a1cec5
-
SSDEEP
6144:NeUmicwyO8C9BCBoKVzr56ejpszr3oiwljs98qeYyllvFh:NHAMBCBoKVZ6cpsbVwljC8qev3Nh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf0aa4352ec27ccaf258a8cc33d9ac4b_JaffaCakes118
Files
-
cf0aa4352ec27ccaf258a8cc33d9ac4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ