Static task
static1
Behavioral task
behavioral1
Sample
e173da2ff620e4a5dd47032a604b7b58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e173da2ff620e4a5dd47032a604b7b58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e173da2ff620e4a5dd47032a604b7b58_JaffaCakes118
-
Size
714KB
-
MD5
e173da2ff620e4a5dd47032a604b7b58
-
SHA1
42f6d095574bfa0a741800ecf834415fcdadc97a
-
SHA256
5eb5b955ca8f2f375b8229b5bc224119d5226b684660985874b5a8c263ff952d
-
SHA512
85e8940642700c3055ced1dc60f33318abb4dd0700e691d7232fbc61aa5b628910da3d3d514c2b299f12e921cedd6205ab35b6c22bb07b7380f065f7d48fd03f
-
SSDEEP
12288:WfS345qLKWgTjNjibNuKQQCsQ5GNkLN2Xl6SBS1Qbwo6nZDlVmKP:WfS345qKZjibNWQCt5ol6S0Qb6DlV7P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e173da2ff620e4a5dd47032a604b7b58_JaffaCakes118
Files
-
e173da2ff620e4a5dd47032a604b7b58_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 528KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ