Static task
static1
Behavioral task
behavioral1
Sample
1560e661ed5a45688d43f082bd541680_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1560e661ed5a45688d43f082bd541680_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1560e661ed5a45688d43f082bd541680_JaffaCakes118
-
Size
96KB
-
MD5
1560e661ed5a45688d43f082bd541680
-
SHA1
6c0af30ca7f8bcdecc6b7eff852e64f74a04e5c9
-
SHA256
74e9df35d5c0c6885f4131cff3171deea27680f031dd0eca5b147bc7110fc877
-
SHA512
97ea3ffffd32a51f2da061f1e6f95f1d2556486ace23f93687bd2ad6d0f2937299eb1c73dc2793a925a3ae5925a4ec6dfe4eb5aee249791d4a63f9dd0b9ef5e1
-
SSDEEP
1536:Rx3WiQpYlUiewMD9HDtjFn1hpacpME3dwQs/am91YOQ3flUQF+A1Fu:Rx3WiAYfM/F1hpacpME36eOQ3C+1c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1560e661ed5a45688d43f082bd541680_JaffaCakes118
Files
-
1560e661ed5a45688d43f082bd541680_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ