Static task
static1
Behavioral task
behavioral1
Sample
1548dec671e1b1af8a7c137734059ef8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1548dec671e1b1af8a7c137734059ef8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1548dec671e1b1af8a7c137734059ef8_JaffaCakes118
-
Size
86KB
-
MD5
1548dec671e1b1af8a7c137734059ef8
-
SHA1
fac77d20a9c05ba8ea356eee702d67cae433de82
-
SHA256
f56811f7315882d27bad013973b5d2a6531cd8de68170c3d5e048167b37d4502
-
SHA512
af2e3b8d6a9fdc4f91c635ac2bb2e64f0fcee2dae2124fc24b7e7d1ff7b82b4e178c5cbedc893df437f313a2b6f0f8a6f76652f24e4f2a42ec230e2392469a34
-
SSDEEP
1536:PMrKkzC61W/npF4wDEo9Ob4Icbm/imRIZR+WSLQVy08zTo8UMcU:UrZzJ4fk14nb8bRIZR+Z8J8RUMH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1548dec671e1b1af8a7c137734059ef8_JaffaCakes118
Files
-
1548dec671e1b1af8a7c137734059ef8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ