Static task
static1
Behavioral task
behavioral1
Sample
0c8261d6182a07e2d5bc81efacf5bb99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c8261d6182a07e2d5bc81efacf5bb99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c8261d6182a07e2d5bc81efacf5bb99_JaffaCakes118
-
Size
450KB
-
MD5
0c8261d6182a07e2d5bc81efacf5bb99
-
SHA1
50b2385a814e26053042de9407bd3e4994bf46e9
-
SHA256
bdad5049ecc1c6a6306bbdcbd65a242b0b8249939e5e52381cad0adb299093d1
-
SHA512
21e078b2aacd4ad950741dae5b1b336b20317416d9d2b5ef3370505c7b05a4c6a058876d4245191e8d9094bea8feb767d2f8ac1060362d733bc3bedb47803554
-
SSDEEP
6144:LCA9y5+6LQjkPY1vgyyfvUmbHvQ0JGskEJTfdKtxwk:GA91jkPY1vAHUmbPQ0JGskEJTfdKTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c8261d6182a07e2d5bc81efacf5bb99_JaffaCakes118
Files
-
0c8261d6182a07e2d5bc81efacf5bb99_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ