Static task
static1
Behavioral task
behavioral1
Sample
1179a7989031fc4b6331505b388dcb12_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1179a7989031fc4b6331505b388dcb12_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1179a7989031fc4b6331505b388dcb12_JaffaCakes118
-
Size
378KB
-
MD5
1179a7989031fc4b6331505b388dcb12
-
SHA1
eb644752ffb7d9b12511a0d10448150c91eb30bd
-
SHA256
d150feb631d6e9050b7fb76db57504e6dcc2715fe03e45db095f50d56a9495a5
-
SHA512
c21193698a03259eb486ebfb281e4c8fb7224814fd81d9d676c3ff8f7c9ebb8f277ef03cf5025b648e88849cca8731d16b7735288e49b0bf04da9336b4279b31
-
SSDEEP
6144:0QT73Grj0u1H+DTqKXKqYpwGspOzo5R7dhV0iyIwu5CfQxt/vVauu1fmLA3Kjx4b:rTDu0a+DnHpOAHVtyIV5cQXHUuuU+6Bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1179a7989031fc4b6331505b388dcb12_JaffaCakes118
Files
-
1179a7989031fc4b6331505b388dcb12_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ