Static task
static1
Behavioral task
behavioral1
Sample
ff38fb89c4a9826d259d62c659caf13a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff38fb89c4a9826d259d62c659caf13a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff38fb89c4a9826d259d62c659caf13a_JaffaCakes118
-
Size
440KB
-
MD5
ff38fb89c4a9826d259d62c659caf13a
-
SHA1
476261ad1e841e211f6ae7d5b32eb961a8ebb701
-
SHA256
dc712109e28e6135df55071d9b83127fdf6b946c0ec99d48cfcf723c9ba9ebcd
-
SHA512
7e35455014c212fed72bbcf28f0a8f208361300d4a213aab4f05f226c6117c2be8fab10ef0e05b20894148b5e9ba7040668b17af73ac9e166d8a6d1f4f49eb38
-
SSDEEP
6144:K9qROWGtGSJLg/Ud0QjyIb7V6onNXmHIBGIwkmBbGzqSdlVVngwYcV9U:DROzk0Md1Y2oNwkmozqSdDVngx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ff38fb89c4a9826d259d62c659caf13a_JaffaCakes118
Files
-
ff38fb89c4a9826d259d62c659caf13a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ