Static task
static1
Behavioral task
behavioral1
Sample
f65eb064f45c6923071e8c2b98020e66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f65eb064f45c6923071e8c2b98020e66_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f65eb064f45c6923071e8c2b98020e66_JaffaCakes118
-
Size
682KB
-
MD5
f65eb064f45c6923071e8c2b98020e66
-
SHA1
6d08dc0c5c2771f748ea6eda7ff14e323d2d6fd2
-
SHA256
1fe5e5c0f8d4534406a48d8a5981257b72b269aa62601093a52d0461eed78729
-
SHA512
a20402faad2730ee667e7bc3d4d00d515ba996ba6f8627fba0fbb6ae1cddf4d7b59f4fb6340624d66b2fc0b03cdcfd3126e9f30716d06349c8fd1e74e44116ad
-
SSDEEP
12288:m+vTXtvBdJ0JxVCKZr3jKz+rbSByB9M08DOU/PbTMBiGa:PVWz8z+rbSByB9nwlkBiF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65eb064f45c6923071e8c2b98020e66_JaffaCakes118
Files
-
f65eb064f45c6923071e8c2b98020e66_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ