Behavioral task
behavioral1
Sample
f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118
-
Size
477KB
-
MD5
f246ceb3ededbb1a8d2100940a69696c
-
SHA1
0d954cb87143906a4735b392c42605fb141af53b
-
SHA256
008adfd70de846c8dca9c2f1940c769e78cfcb07cc0992d3477aca6476e1735e
-
SHA512
4c506dd07e95ddf328fad1893092ccc60e381470a700d8eb7798758fe8ee3f51b714b3f098201a6a55e035e3c404e0de5e5f9026b7e30e6a207bc78b6aeae097
-
SSDEEP
6144:VzBKg/UfKcbYc66+ph5+o7emu+8ABC+ybzOOzj:VP/c8Lp647ANO0j
Malware Config
Signatures
Files
-
f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 471KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ