Static task
static1
Behavioral task
behavioral1
Sample
0cd3b3066f4025a0c36ac2ba806e3e12_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cd3b3066f4025a0c36ac2ba806e3e12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cd3b3066f4025a0c36ac2ba806e3e12_JaffaCakes118
-
Size
225KB
-
MD5
0cd3b3066f4025a0c36ac2ba806e3e12
-
SHA1
ee3e753ec79be697959adc6cca4cba13914c70ed
-
SHA256
69245e50424e58d14c67c159624c7cfe1d5480b3002c68b02525d64ce1b3b823
-
SHA512
a5fd330fb33c14c91d9c105432292d3740955aa24c43c045a25c8d63d7dd286997e50397fab3effd4eaf35608ec26a6c2a4d9ee384ad052e174147abdb5f8169
-
SSDEEP
3072:esxyPQS3fBAy2s1lJ0YBbuG2jteQbYRvEd14MmlMBdni/IP06quih99AnDQ1/Z2u:esi3fCyzlJZBWt5zi/IuX9Z1E2ea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd3b3066f4025a0c36ac2ba806e3e12_JaffaCakes118
Files
-
0cd3b3066f4025a0c36ac2ba806e3e12_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ