Static task
static1
Behavioral task
behavioral1
Sample
09a81515a9bf4bb5df1f64ffced9b9c6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09a81515a9bf4bb5df1f64ffced9b9c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09a81515a9bf4bb5df1f64ffced9b9c6_JaffaCakes118
-
Size
709KB
-
MD5
09a81515a9bf4bb5df1f64ffced9b9c6
-
SHA1
7c1146e4773137b2b949befe2ca8b25d721f7900
-
SHA256
70762ea1578b320d1e070701ceb4201fda2415d390cec022c619a11ed0a1714b
-
SHA512
9b58e02c08c7e68a0328d80c3a204801ed4abcd143f587f34ad4517793fc55171bd358f4b892c36bf8a94711f847f97d2c44c5f41c5ae23a30a11d784f81a703
-
SSDEEP
12288:aUX7vdyHaUpE3Ffa8EsmnYmxRDJ/BQx4eT/oFUHQHOI+dnMzZ5r3u+aXgcrOQPS:aUXDdy6EE3Ffa8ESKDFB2T/QYCZ5Tjak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a81515a9bf4bb5df1f64ffced9b9c6_JaffaCakes118
Files
-
09a81515a9bf4bb5df1f64ffced9b9c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ