Static task
static1
Behavioral task
behavioral1
Sample
5c2f8f3169f6aa13b23cbcac0b2530b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c2f8f3169f6aa13b23cbcac0b2530b3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5c2f8f3169f6aa13b23cbcac0b2530b3_JaffaCakes118
-
Size
181KB
-
MD5
5c2f8f3169f6aa13b23cbcac0b2530b3
-
SHA1
bd1b8216d05ea7b9e283f5ed295d054ecddc40f5
-
SHA256
f30fbadea20f8ae93e7db667640fe57be52f068389f11f4399ae9e990d8e065a
-
SHA512
726ab3f5c29235b0b74348deb24314989e15e6523f82602ef9027497888696b583aea8c0474aa567559f57bc62893c1220d4b178d72db9c70e448e6e895388e9
-
SSDEEP
3072:koqC0GPbSSXj58Bijd59KjjfU1YI2JKjrdJhIAbl8KWbDbD8ZXBx0bRZrxSNO:koqCBu24jM1RTV3l8KWbvDSXBabh+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2f8f3169f6aa13b23cbcac0b2530b3_JaffaCakes118
Files
-
5c2f8f3169f6aa13b23cbcac0b2530b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ