Static task
static1
Behavioral task
behavioral1
Sample
f71931c8b0ae67c666eb0e32b1c16a26_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f71931c8b0ae67c666eb0e32b1c16a26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f71931c8b0ae67c666eb0e32b1c16a26_JaffaCakes118
-
Size
135KB
-
MD5
f71931c8b0ae67c666eb0e32b1c16a26
-
SHA1
75430b76ce7f647b5a4ab084d0657c63defe38d3
-
SHA256
3905f4a0e6164ec7db7848f1363cde836bab50273c4e9a1b4ae630d15eafc929
-
SHA512
9d84ba000532fa4764004e7c7945a56208c6af9172b34aafb15c97915ddd8eeec41ab881eabeecb6c61f0a035b2898bd7593ae303f5ba4a29276ae144c077267
-
SSDEEP
3072:CBi+tmVWCXqtJ3wUxPyx0TFurz0eYm9zkd/:v+tmv63T5O3zb9zs/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71931c8b0ae67c666eb0e32b1c16a26_JaffaCakes118
Files
-
f71931c8b0ae67c666eb0e32b1c16a26_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ