Static task
static1
Behavioral task
behavioral1
Sample
dc95b855b5fbb587f40695b05136a3de_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc95b855b5fbb587f40695b05136a3de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc95b855b5fbb587f40695b05136a3de_JaffaCakes118
-
Size
437KB
-
MD5
dc95b855b5fbb587f40695b05136a3de
-
SHA1
77e62d42ef0fb2103c9ec05f1310008ddaa7f548
-
SHA256
1ba7716bf948f8e28c1f331daf257ecceec0785cb47febc501f66406d586445f
-
SHA512
5bb8bd5f27ae11897f74b126c46364be87dd5e447d9bd40ad2dd7b5dd5cbe00e9e94158356393befddead444fb5beaefadcb9b7abb9290485daf410380bc6537
-
SSDEEP
6144:2neCdPGBAbobL4qQ+sgR2Tj6q8fHRZUaPOiXO++xG7oe:secPfMFQx8HcaPRXD+yt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc95b855b5fbb587f40695b05136a3de_JaffaCakes118
Files
-
dc95b855b5fbb587f40695b05136a3de_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ