Static task
static1
Behavioral task
behavioral1
Sample
ff9e485275c130552f8f8a1491e12e2f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff9e485275c130552f8f8a1491e12e2f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff9e485275c130552f8f8a1491e12e2f_JaffaCakes118
-
Size
3.0MB
-
MD5
ff9e485275c130552f8f8a1491e12e2f
-
SHA1
4f1aeeb35a23bc95a7ea943a83a7c110e28ba1b9
-
SHA256
e702f42c3fd80642104f41848b7b2bcec5d03c300345e21566b4b2aeb9475065
-
SHA512
5a2eb5f7bc8ab4d9219f176b3e5841e84869f0bdc4ccf9822824355a3812c1b53038417253aa0a6f85c51e8c25c8c4bd627329a8722c5563eef7d4eb78c606ff
-
SSDEEP
24576:V5DnmQyiKIWuGuis+iWOlMsVedagcJWMSRIkozmpm3BnHoH1pPsX5Y/gyOSOu9Jg:V5Dn7+uisjMagcO+aMgMSOWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff9e485275c130552f8f8a1491e12e2f_JaffaCakes118
Files
-
ff9e485275c130552f8f8a1491e12e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ