Static task
static1
Behavioral task
behavioral1
Sample
d73bc2ae33762b0480b29d6261ffc784_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d73bc2ae33762b0480b29d6261ffc784_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d73bc2ae33762b0480b29d6261ffc784_JaffaCakes118
-
Size
79KB
-
MD5
d73bc2ae33762b0480b29d6261ffc784
-
SHA1
b99c8551d4a043d8b2994d04c91f5d087a1789a0
-
SHA256
9d0a95c1e8631c06f4b0373729abfd0046c224e896b84664f36b8f535fbbd54f
-
SHA512
a13d459a0e1ff99f93f3d5154460360915fd248e7b522e42511edc0bd1e2a1e772b040a272da47a2bd5192d30b6159da91d81f58f1fb7d045af2c3960c6af7fe
-
SSDEEP
1536:UFb4yvjtXl0P1ZyJRseDXrKeQzeSqU8dmENhskAEw3PUkHN9In5olWJOF+8/LSS1:0440PyvseDbKoSud/AEQPUONqlLSeS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d73bc2ae33762b0480b29d6261ffc784_JaffaCakes118
Files
-
d73bc2ae33762b0480b29d6261ffc784_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ