Static task
static1
Behavioral task
behavioral1
Sample
f04317186766311ba61535abccaf05be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f04317186766311ba61535abccaf05be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f04317186766311ba61535abccaf05be_JaffaCakes118
-
Size
168KB
-
MD5
f04317186766311ba61535abccaf05be
-
SHA1
c8dd08bceed6bfdcfb9db63afacfd04d5813fadc
-
SHA256
e28e18f619ddb04a71b8797fb42492cb145bbf474dbdb6ef1554b1e53666e470
-
SHA512
c711c4f6a51b654875b5329d962e98500aafc640e6083c2e2d8b029dffb27ae63f9509313bb8d1e730137c7f359b95d55c54bf7cff03bad4e5d582c1409a7f05
-
SSDEEP
3072:AbPkARxUpKZBB0FIQYGStLx//Su5F1+lWKJVZQPbdj8f01p+7mROI:Abkyx310WQYGsLx2lWKJVsbdj8f0y7mJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f04317186766311ba61535abccaf05be_JaffaCakes118
Files
-
f04317186766311ba61535abccaf05be_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ