Static task
static1
Behavioral task
behavioral1
Sample
f219d737115be9d146a0cdea19d543eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f219d737115be9d146a0cdea19d543eb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f219d737115be9d146a0cdea19d543eb_JaffaCakes118
-
Size
596KB
-
MD5
f219d737115be9d146a0cdea19d543eb
-
SHA1
39616242b2cacbb438f11775db6808a87a851eb1
-
SHA256
2c764c14280ef53d495b7628a39fffd5040c8c4504ef10b8a7454d5a8bad711d
-
SHA512
d099ae81231479a3db9af4d26593fe5116dd6fe6a4d046e52f1a60b05a96d4feb53c269b5e463db47e4431ab0c96735215487094a54bfa6b3aa267b7d97e910d
-
SSDEEP
12288:9rXwzivFN30z5lkR0rk06ajUkHau59w7uyxeFB0N9Du:dBN3OlBvZbHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f219d737115be9d146a0cdea19d543eb_JaffaCakes118
Files
-
f219d737115be9d146a0cdea19d543eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 590KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ