Static task
static1
Behavioral task
behavioral1
Sample
c036930f26f63d5be36ec677753a840b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c036930f26f63d5be36ec677753a840b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
c036930f26f63d5be36ec677753a840b_JaffaCakes118
-
Size
212KB
-
MD5
c036930f26f63d5be36ec677753a840b
-
SHA1
44662874704bfdd4102ee9ffbfb6d34fc7546521
-
SHA256
291f71d3441e117048241d2ff5513efc1b1bab75bc375091d50e4557702d572c
-
SHA512
1a367c28a49b254039861c4bbffef474d9c911892f74ce2ff13e2d32e556813a21021d402fb0414a1c09a49b282490c4b20a38080116700bcaf3fe1aab4f15ec
-
SSDEEP
3072:GKP/f04sgUQ6ZI/+69Bn5tQdHvbBFOl3JGQ7ldEYfTdnlM6oo0UPUmuSB0I5E:GKP/Ma/6Zh6dWdjQ3RcYYXFUPiSuI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c036930f26f63d5be36ec677753a840b_JaffaCakes118
Files
-
c036930f26f63d5be36ec677753a840b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ