Static task
static1
Behavioral task
behavioral1
Sample
20ab822aa24f01d171f063a93675a115_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20ab822aa24f01d171f063a93675a115_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
20ab822aa24f01d171f063a93675a115_JaffaCakes118
-
Size
1000KB
-
MD5
20ab822aa24f01d171f063a93675a115
-
SHA1
5d185ff2b7fe496e3922678ab3030846110712e5
-
SHA256
00359bd59c5009663d59825dad628f38c579b01b16b455e81bd059d2b03a1323
-
SHA512
26f12bb6491f2d492f153e38a7908d402897aa5cd302ceccbc04e041dce9ff7ad9a711b881109ebd84e5a2925cd24bc4e5c13f1cf071b58f7787ca92597666ac
-
SSDEEP
12288:RBmrDXCs2zo2z5bjaT7ihIjUWrhoUPWAsBQ29nzvZzpTaTUfAJFMI8worXUBkjj0:RIZj7oZVvZBAgjX5XuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20ab822aa24f01d171f063a93675a115_JaffaCakes118
Files
-
20ab822aa24f01d171f063a93675a115_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 997KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ