Static task
static1
Behavioral task
behavioral1
Sample
d34b0903691877f504e21f68ea22f72a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d34b0903691877f504e21f68ea22f72a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d34b0903691877f504e21f68ea22f72a_JaffaCakes118
-
Size
148KB
-
MD5
d34b0903691877f504e21f68ea22f72a
-
SHA1
6efef92c0dd40ecbecf7e3e4781069d9297311cf
-
SHA256
0e6dd7da9946c3caffc133f3563e27997fa3a5164eea7338424b1da40410f843
-
SHA512
ba44a77ce26c9cdbb0d805315d1e0da6f171391864499874467e1fbbc94dcae04d3a13d99a4efb2256eef2b124b8d360dbbfae4a5a095b3e3f8b4ce1eb9b6a83
-
SSDEEP
3072:f7UXnPAI47g6EoFJyBmg/2nqs2szrq295u:fPg6S/2p9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d34b0903691877f504e21f68ea22f72a_JaffaCakes118
Files
-
d34b0903691877f504e21f68ea22f72a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ