Static task
static1
Behavioral task
behavioral1
Sample
0aed20eae3f29c7c9fb5acefbfe1f571_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0aed20eae3f29c7c9fb5acefbfe1f571_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0aed20eae3f29c7c9fb5acefbfe1f571_JaffaCakes118
-
Size
57KB
-
MD5
0aed20eae3f29c7c9fb5acefbfe1f571
-
SHA1
b0af6f926da8684e1fd738ef0d1927437512ea7c
-
SHA256
79d2bad0a974aebe62068924aaede133bf975424e9f6616e30665b23dd12ec5b
-
SHA512
3587f5e43d23ab1db1bad35ab33894f708d53efbda43b6b49304dd589d43c5b8db0e23620d0f9d44a861dc87b807f189de542e4aec08de72ecd9f0572c3b5c03
-
SSDEEP
768:fsTQK6rqwhltEMsSf00QQeuk3HfYFuAVwT2agBzAWQgcIOodKfgSPllllOZl0E3C:fskru8ltEMs60FuoAPI2agBzpf0kAEy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aed20eae3f29c7c9fb5acefbfe1f571_JaffaCakes118
Files
-
0aed20eae3f29c7c9fb5acefbfe1f571_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ