Static task
static1
Behavioral task
behavioral1
Sample
0cca4373e507a2be3a73337a1dd1cd71_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cca4373e507a2be3a73337a1dd1cd71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cca4373e507a2be3a73337a1dd1cd71_JaffaCakes118
-
Size
113KB
-
MD5
0cca4373e507a2be3a73337a1dd1cd71
-
SHA1
b48e3841ba24c8c0ee350ae81745b627d2611a7e
-
SHA256
a7a98f3d6e4ddf15f106011dcefa864c57b1c9e1c522f49d0041dc2181871a10
-
SHA512
b35a9d0a53d71d69390c649b537e1391f21011d916e7b3c1a60d490cf0ef8b07a9e8100d940c04bd091c3236ffd626f29fe4e55577561ef008c0b6cbffbcf887
-
SSDEEP
1536:8zfeKdfYmof4DvO58gmF6O7XxP+D/yXemFkSSq56CelN2YCrSQw3VBGW1pfq0eT:85dgudgmFVXx2wlV5wlKSVBGapfwTA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cca4373e507a2be3a73337a1dd1cd71_JaffaCakes118
Files
-
0cca4373e507a2be3a73337a1dd1cd71_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ