Static task
static1
Behavioral task
behavioral1
Sample
ff96a0a6a898a47265a817b0bf97ab1d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ff96a0a6a898a47265a817b0bf97ab1d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff96a0a6a898a47265a817b0bf97ab1d_JaffaCakes118
-
Size
660KB
-
MD5
ff96a0a6a898a47265a817b0bf97ab1d
-
SHA1
be983a6e8048e17e3475d3ce2a75844fe8b51a76
-
SHA256
e71703a89fb65868f5daf7517bdd13d16ad09fc7f9a7b3bf4a65fa67844c4b1b
-
SHA512
7f3c26df383b7aa8d8fe1a1869f519a1e039a36a5d4c4438e151e4f0b9dda6fa41b75b0d8396053aaf5c91ba690c928b30b1836eae150013600371ffbebe0e9f
-
SSDEEP
6144:73cz/lhDZM7M00G4t2aFu7V1juxuXu2mid4vwfWZgUGDSG7XkimflOv:DcZFW0G/0u/tXuts4vwfW3mSe0imtO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ff96a0a6a898a47265a817b0bf97ab1d_JaffaCakes118
Files
-
ff96a0a6a898a47265a817b0bf97ab1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 657KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ