Static task
static1
Behavioral task
behavioral1
Sample
413140176872f7628da2a8f6edef5f61_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
413140176872f7628da2a8f6edef5f61_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
413140176872f7628da2a8f6edef5f61_JaffaCakes118
-
Size
142KB
-
MD5
413140176872f7628da2a8f6edef5f61
-
SHA1
3c7669950ac3f9a2d9888668a0d62cddd0c87b00
-
SHA256
3c3cb4871091c164474e681747130957c9c314829a70fb9f195b880b810e7ca3
-
SHA512
4a20b1500378656d07260665b354c37c96fa6f63dc6551ae14b0f38c3ceab2890a3f8821c0ea191f305be759f215fe11b19c038aeb8ed719229a0c332d008127
-
SSDEEP
1536:bYxE/4SqJUVMvbg67Iy/ntecoqSYn9JeYhl4SqJUVMvbg67I3LZcoqSYn9wyI+Ka:0xEJejI9cAYnTeYxejI3LZcAYniy4PA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413140176872f7628da2a8f6edef5f61_JaffaCakes118
Files
-
413140176872f7628da2a8f6edef5f61_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ