Static task
static1
Behavioral task
behavioral1
Sample
07324f6b8977cf97d24bad3d7b948653_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
07324f6b8977cf97d24bad3d7b948653_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
07324f6b8977cf97d24bad3d7b948653_JaffaCakes118
-
Size
761KB
-
MD5
07324f6b8977cf97d24bad3d7b948653
-
SHA1
fecaec3c195df8134390468521ae55d5b16e9a8c
-
SHA256
ac2453faea61d9ddf20dab04a54e3d8373271e9fca314bb190e896a5726dc620
-
SHA512
ba237db0e4aa2ced4da0e754ac29d8bbfc13dbf583370ec998d990327259bdb3161c5a15c1127283aa0c43b13821f2495f4eb4186240ee78dc88a9b2a4f1b010
-
SSDEEP
12288:eCgi1ymiWaNC5ONjrhnzOD/LgmNaooXi:epLrN9ZhzW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07324f6b8977cf97d24bad3d7b948653_JaffaCakes118
Files
-
07324f6b8977cf97d24bad3d7b948653_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
GVaYr m: Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ