Static task
static1
Behavioral task
behavioral1
Sample
f85a197398a321ca5b9835496c413455_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f85a197398a321ca5b9835496c413455_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f85a197398a321ca5b9835496c413455_JaffaCakes118
-
Size
331KB
-
MD5
f85a197398a321ca5b9835496c413455
-
SHA1
04198ec70635c059c315643ae99fbf9a4a3ca1a4
-
SHA256
ea8eabee0195185f4dc86054f70dabcc272d043275eb7c69268c218eb39b9aa1
-
SHA512
261b04387832f24bcf13e8eb30a6881103979489a036190a855a5062f0bc4cbb6da4c615520890d99a89d413aeb8cf02726357677d6d0b3df88c040d89cc09d1
-
SSDEEP
3072:tRNeazea/jMibqfQqFyGCDXiW9Pp/+Tl4abpuu201PB1BBXIDwtqSPVINrAfvp15:tP5aibqI59PpOPf201/z7pJ+QQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f85a197398a321ca5b9835496c413455_JaffaCakes118
Files
-
f85a197398a321ca5b9835496c413455_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ