Static task
static1
Behavioral task
behavioral1
Sample
2477bf6a686d28f449915a0f6419f308_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2477bf6a686d28f449915a0f6419f308_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
2477bf6a686d28f449915a0f6419f308_JaffaCakes118
-
Size
91KB
-
MD5
2477bf6a686d28f449915a0f6419f308
-
SHA1
34299d65825405361a9d80adeeb6bbc69632a6ff
-
SHA256
0a8fe6b250cc04fdd844bfb6a5113494640b24b04f8ce649e4d915fb4f80e46b
-
SHA512
98303aca6a52efcbda84ae9c1c6810d69fc55282f6054baf98121a656355066f9f325c3bd719dec6f1314c55d14adb4e88b3995cdb982899326b8249363edc20
-
SSDEEP
1536:W8jc9LaykgCeAdZuZY/9JK/r7GHCbPUeN93uv7/0TbA3OKaQSDOxgtM4idF:W8ALamu4YvK/PGi1ZEQQSDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2477bf6a686d28f449915a0f6419f308_JaffaCakes118
Files
-
2477bf6a686d28f449915a0f6419f308_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ