Static task
static1
Behavioral task
behavioral1
Sample
1fbf4813a6c6fd9c55e8f8c8beb200f3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1fbf4813a6c6fd9c55e8f8c8beb200f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1fbf4813a6c6fd9c55e8f8c8beb200f3_JaffaCakes118
-
Size
1.2MB
-
MD5
1fbf4813a6c6fd9c55e8f8c8beb200f3
-
SHA1
648e3959c35790655ebaddd1bec2902938cdd540
-
SHA256
b43dde5ca3d23d16af5bf34c522869dff9624a78be67dfc3acde5c81ef24d318
-
SHA512
bffb6f378b581650ed74b6e00b28178a94b4584bf841d774bb867debb7b54dd1396c1ae33159c02301b334e8576958836740515efc17a362f56578ac31e7638f
-
SSDEEP
24576:TWFOBlUXQd4h4RJgaCN2es8nIrJ3hrFxEPw5IMuYU:DB2Ad4acT3IrJhrFxEY5IMuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fbf4813a6c6fd9c55e8f8c8beb200f3_JaffaCakes118
Files
-
1fbf4813a6c6fd9c55e8f8c8beb200f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1003KB - Virtual size: 1003KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ