Static task
static1
Behavioral task
behavioral1
Sample
0a3c97908cb8e60ccc54adc3cafcbc90_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a3c97908cb8e60ccc54adc3cafcbc90_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0a3c97908cb8e60ccc54adc3cafcbc90_JaffaCakes118
-
Size
1.2MB
-
MD5
0a3c97908cb8e60ccc54adc3cafcbc90
-
SHA1
2bf7f6f9234dcd988f3325817a292fd733b031f6
-
SHA256
5c3eecd526f11750a1d184cb96d43897e711cf0ed6b179219f92f24b673847c8
-
SHA512
6a9f3b67e7f42c8c11ba4c5913fd2af19398dd9d3ce1e98d177c1eb83d6dafb642d9755c91610a9eeab328a3ab993988e6e0f97a29af46ca1bd98471bbc8c769
-
SSDEEP
24576:8KGHJkwmn9mDFNubiBLTQE4nV0WcrzRZ9aONUmJpkkw:X9iBLTosHf9aONUmJq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a3c97908cb8e60ccc54adc3cafcbc90_JaffaCakes118
Files
-
0a3c97908cb8e60ccc54adc3cafcbc90_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ