Static task
static1
Behavioral task
behavioral1
Sample
c9bb5a3c95d510d0b7b5ff09b6d0dd9a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c9bb5a3c95d510d0b7b5ff09b6d0dd9a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
c9bb5a3c95d510d0b7b5ff09b6d0dd9a_JaffaCakes118
-
Size
92KB
-
MD5
c9bb5a3c95d510d0b7b5ff09b6d0dd9a
-
SHA1
e8cc248dc8850d525702adc6e69cd071e05f6158
-
SHA256
c21dddd371a3f53afb2c9798f05128a63eea8d85c9e42bd63fe7d6db853d3822
-
SHA512
717d9a17944accc06bb82b2f8357139d7eb82d37ec7333cb65daad5c6cd9eb581140e2251fcc5e903f6c1cab5144667bb0166cba1f6545b6d76eb56864e130ae
-
SSDEEP
1536:Y8jc9LaykgCeAdZuZY/9JK/r7GHCbPUeN93uv7/0TbA3OKaQSDOxgtM4idF:Y8ALamu4YvK/PGi1ZEQQSDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9bb5a3c95d510d0b7b5ff09b6d0dd9a_JaffaCakes118
Files
-
c9bb5a3c95d510d0b7b5ff09b6d0dd9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ