Static task
static1
Behavioral task
behavioral1
Sample
f5bb780944b82d9143a47ddf8df3d095_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f5bb780944b82d9143a47ddf8df3d095_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5bb780944b82d9143a47ddf8df3d095_JaffaCakes118
-
Size
160KB
-
MD5
f5bb780944b82d9143a47ddf8df3d095
-
SHA1
7bc5c5fb0897c52ca11dabadf26b903f30b1679a
-
SHA256
1548ffe73ff1b47a40871ebbef1632505de9e2720f45513859247d22bf254819
-
SHA512
7edbc97c5640cf0ba471d3142d5ed2b81868121e56c5e245151000cb482bb197172cd821ac1f5983217886ee74105f049771cc64f8b6c0236799086b9e73f300
-
SSDEEP
3072:snDV6Qz11WQFvYGnJd6KpZV3uTN9WU/G9B32w590KqQbZzALbvl6:uQQaQFvYGJd6KpZV3uTN9WU/G9BGw59q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5bb780944b82d9143a47ddf8df3d095_JaffaCakes118
Files
-
f5bb780944b82d9143a47ddf8df3d095_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t58t Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ