Static task
static1
Behavioral task
behavioral1
Sample
dc9a314af6aa38d0eacbf35d00f4709c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dc9a314af6aa38d0eacbf35d00f4709c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc9a314af6aa38d0eacbf35d00f4709c_JaffaCakes118
-
Size
982KB
-
MD5
dc9a314af6aa38d0eacbf35d00f4709c
-
SHA1
029e14e5b00a1b771e1d14f150218021bb9e88e6
-
SHA256
0bd818075fd274bfa9be36b7f23dc412418243f1de7bf2bc2930de3f62fcbbc8
-
SHA512
b179bfd838cd40b0d78ffdc0d7c38dc21350e6044c0966d89745a9ff10d594e380115f2affb711fd9f20c7a9148e643a96a413d1b88f4744bd931bcd2bc18f71
-
SSDEEP
12288:imSdiMXVjsQDgMovlhDvXs7EaUn+Iib+HmSdiMXVjsQDgMovlhDvXs7EaUn+IibS:ZSdiA1hov7/sgAtSdiA1hov7/sgAS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc9a314af6aa38d0eacbf35d00f4709c_JaffaCakes118
Files
-
dc9a314af6aa38d0eacbf35d00f4709c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ