Static task
static1
Behavioral task
behavioral1
Sample
d5c125edd2136973f5f0b864833373ed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5c125edd2136973f5f0b864833373ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5c125edd2136973f5f0b864833373ed_JaffaCakes118
-
Size
48KB
-
MD5
d5c125edd2136973f5f0b864833373ed
-
SHA1
4e503a60747a14a4867f5d783b50556154924bb1
-
SHA256
86a12b7685be48ae19b5beb86f37ac8991a0a772e19ff128e4f5b9e71e3e8048
-
SHA512
235a62fd55252466c7baef382aa4a13c1624195dd01a034d462dc22e3141fa3a96e166fb4c34b6393aee45c44affb4d41f398df6d9feb2f54d085c7ffd5e2ae4
-
SSDEEP
768:2O97EOwSZi4fzLjHEy7Jd2NirJJt0yjVhX2tcMAk583Q9A:nlwYzbk2bQyH89Ak5gQ9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5c125edd2136973f5f0b864833373ed_JaffaCakes118
Files
-
d5c125edd2136973f5f0b864833373ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ