Static task
static1
Behavioral task
behavioral1
Sample
f0408839394900ba33216617f5a286d7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f0408839394900ba33216617f5a286d7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0408839394900ba33216617f5a286d7_JaffaCakes118
-
Size
9KB
-
MD5
f0408839394900ba33216617f5a286d7
-
SHA1
324ba43ea9726b6cb4840341a138058ab0797725
-
SHA256
d59ee228a31e1bf47036e02ac0f2d47aa6b2ba735f6b3436125710bef99b0b75
-
SHA512
b727d783f1abdd97172bc8701ea2612b8f4ea7f8ddd5d759777031ee63d1bbe11e45b39e8d343ad6aabc42ead1abda13ac58d2d9e038f8a447ffe20941bf42db
-
SSDEEP
192:6BksuXzHNQLpeMZZ3/93Vnjdwqz83FIa8a2p:FH8peMJFnhwqA1Ia8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0408839394900ba33216617f5a286d7_JaffaCakes118
Files
-
f0408839394900ba33216617f5a286d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ