Static task
static1
Behavioral task
behavioral1
Sample
f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118
-
Size
893KB
-
MD5
f05124fcdd4dbcdede0e398fcce85ee9
-
SHA1
5f83804885626447baacb9edc388c114a1d0faf1
-
SHA256
0e20f3d09159e9617d92f6363e80ef28d929e975deaa2883bd98b5956eb17708
-
SHA512
1128ff0f96386c911e53114bb66077576cd8fbeabec112eb53954b7cc4b06ed2bc88a6d1529a0ba04233fa9d3458d408e21713eaf774977d7d1856f944fc6a7d
-
SSDEEP
12288:1fZDmaEJbjJEKdqcMSFWRZ0eeLrfRE9EnprNZMS9dOZ5UP83GUTCDc9F3nC0Py3x:9ZDwqV3RZ0e6YYrNZ+W83G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118
Files
-
f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 891KB - Virtual size: 890KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ