Static task
static1
Behavioral task
behavioral1
Sample
d1497a78da50ed270967bde58111aa91_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1497a78da50ed270967bde58111aa91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1497a78da50ed270967bde58111aa91_JaffaCakes118
-
Size
301KB
-
MD5
d1497a78da50ed270967bde58111aa91
-
SHA1
23a8cee271e9e84adbcb9c450b80080bd30698a9
-
SHA256
77398bcd760568480d4bdda976d90a694e9d55b0717b3b1f09fe7f74eaf581f2
-
SHA512
8f3d2cdeae5309d916b3783ded2aad1004781331d6ad659cf6397185cece7f4b2844e5443fdfde79753d2afd388aef23bf0f8a81c41cfa9ff96f371552f94081
-
SSDEEP
6144:/PZT3AH2bL337HOtcPwGgWRz/+5x+qFX8bi23LTSalH69P+pZp:3ZrS2bDrwjWR7+IXSalk2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1497a78da50ed270967bde58111aa91_JaffaCakes118
Files
-
d1497a78da50ed270967bde58111aa91_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ