Static task
static1
Behavioral task
behavioral1
Sample
165aa905981301839ab3707a6aff8103_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
165aa905981301839ab3707a6aff8103_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
165aa905981301839ab3707a6aff8103_JaffaCakes118
-
Size
459KB
-
MD5
165aa905981301839ab3707a6aff8103
-
SHA1
2e998404e149b9f7a652ecd0ddb9ace7a787f7b8
-
SHA256
313ecfc83dfd696344b0492c40c106b7ee33d06f3dfdac17200864e8214cb5bb
-
SHA512
49728df28a5d0d87414835e8d197ba36254834a61f21d53af9377cbf36db9c1574541b29d772bfbd0c435753ff30ee29e195fe34fc9445422d5e91a85d77f9f4
-
SSDEEP
6144:ZE500zV6Lfl+RQmsaGSHHdivSHwm5CZq2AnK+LDqf7Q/ZRk0LLzQ8AJYk:C5jkrwPlGM9ivSHv52+qDQDzRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 165aa905981301839ab3707a6aff8103_JaffaCakes118
Files
-
165aa905981301839ab3707a6aff8103_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ