Static task
static1
Behavioral task
behavioral1
Sample
f980bec282ed1262fbc89718645fbc9e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f980bec282ed1262fbc89718645fbc9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f980bec282ed1262fbc89718645fbc9e_JaffaCakes118
-
Size
56KB
-
MD5
f980bec282ed1262fbc89718645fbc9e
-
SHA1
2299a399a1b4e8b5b5b5d7b1150eada588706461
-
SHA256
99a88bb9c50a0601cd1d24baffb86b492d5067f6578c565bd5bf35941bc1ada3
-
SHA512
216174ea08333451424b537a370b6e8de3d6839c8f6b2618cceaea11c6004a0ba31848b76c882a940cdbc0e809f4f708db2b38a7039135793d22ed92eae587d5
-
SSDEEP
1536:A5QAEeWPJ3Q/JL1l0g0IrQ3vyUtjC4+EZ9NnP5p:AKAEeUJA/JJyCrQ36EbHnP5p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f980bec282ed1262fbc89718645fbc9e_JaffaCakes118
Files
-
f980bec282ed1262fbc89718645fbc9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ