Static task
static1
Behavioral task
behavioral1
Sample
f8f98f53023a54e07d9bcefc0a6f7abc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8f98f53023a54e07d9bcefc0a6f7abc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8f98f53023a54e07d9bcefc0a6f7abc_JaffaCakes118
-
Size
776KB
-
MD5
f8f98f53023a54e07d9bcefc0a6f7abc
-
SHA1
b242f3157035e56c76386486f3f39be7b61407b9
-
SHA256
2edd587b9b24d398f0c9bc20fe7519a270ec43c5d55d2c489af92ab0bbf50097
-
SHA512
219a4b6fb5262cc9e7fc9b0c7f2fce5bc9fdeeed91e864b54a47474f587df353dfa861ae37b69e2b9cfbd25b30c9c3929daf4a9b4147449a50610ad479c7e019
-
SSDEEP
12288:lb0X34/4dZ/G/VOaSzO0LBeIqe4k10Yil6pOUmfi235bzIvyBC:FS4/AZ/G/VOa8O0VeS10UpBF23ZIaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8f98f53023a54e07d9bcefc0a6f7abc_JaffaCakes118
Files
-
f8f98f53023a54e07d9bcefc0a6f7abc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 774KB - Virtual size: 773KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ