Static task
static1
Behavioral task
behavioral1
Sample
f70d6e0489961128ed166a409203bd07_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f70d6e0489961128ed166a409203bd07_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f70d6e0489961128ed166a409203bd07_JaffaCakes118
-
Size
325KB
-
MD5
f70d6e0489961128ed166a409203bd07
-
SHA1
0d2a684eb2fce3ee66de4b2ffeeee3926702dfae
-
SHA256
ac6d36341c249028233ec6f3d2226b6060e170fcba82f3b2c7645e7a1ca7f0c9
-
SHA512
d0a20aaa8128e9a867ed22de83b24fc00cea746a1d1cc8f824fcfc6f826825b48ff2f34930df7e61c73d81023b95bed58531e1d5d40f98c33841f482920a7ca4
-
SSDEEP
3072:c77Wdvv5edDgXcSZ5YSIPu5YDRX5mYSbPIGGaZccC1JNT8p7ggWz1bZJD1iaTtZW:lxv5edAc05inJmGYccck0gwVishIYJVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70d6e0489961128ed166a409203bd07_JaffaCakes118
Files
-
f70d6e0489961128ed166a409203bd07_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ