Static task
static1
Behavioral task
behavioral1
Sample
065ee8fa88089e6576aad4b66d1322f8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
065ee8fa88089e6576aad4b66d1322f8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
065ee8fa88089e6576aad4b66d1322f8_JaffaCakes118
-
Size
25KB
-
MD5
065ee8fa88089e6576aad4b66d1322f8
-
SHA1
fadd1d9044f51212fa81c9f3fe676915c1f99d42
-
SHA256
11f7307f314fccd2b1162443bb699d885f5e325b4b638a10997d98247463acfe
-
SHA512
facc63e88bda539b169bae754cb5644e3df07a12d52bcfab0ae441ce6f00ee834f251ea81502617a11bb0da59436e427729cf914e7ff953499286170e8567324
-
SSDEEP
384:ShBLFXZnAy2MeDFw6Lv9uEEF0zgMmW84z61crzkO:ShbBywEuxxdemX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065ee8fa88089e6576aad4b66d1322f8_JaffaCakes118
Files
-
065ee8fa88089e6576aad4b66d1322f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ