Static task
static1
Behavioral task
behavioral1
Sample
10aac69c6ba14f708d9bcaf2a73b463d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
10aac69c6ba14f708d9bcaf2a73b463d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10aac69c6ba14f708d9bcaf2a73b463d_JaffaCakes118
-
Size
112KB
-
MD5
10aac69c6ba14f708d9bcaf2a73b463d
-
SHA1
737858b1e799015d455983aa90a4b6d390811124
-
SHA256
b55e9ea924be3a10366f8b07ce6227b0b6bcba2431eef5b646a4395a56d8af20
-
SHA512
aaaf14b9954a66c99175dbb3bf08d40d8724bba38a071e94622919039977ed025d05fd4cee50274024caf5633a1430b827394d35f15564ed69a64396649b5990
-
SSDEEP
1536:VavZDMR1iB5CqhJ6EgkTV2MJvlYucvHoPSFHMF+zvoedni08c9Q/sl5CcfEvT38:gvZDbBjJlV7J9QIPGHee0vc9YslQI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10aac69c6ba14f708d9bcaf2a73b463d_JaffaCakes118
Files
-
10aac69c6ba14f708d9bcaf2a73b463d_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ