Static task
static1
Behavioral task
behavioral1
Sample
311c81f0ac007acf327335c85620ca01_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
311c81f0ac007acf327335c85620ca01_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
311c81f0ac007acf327335c85620ca01_JaffaCakes118
-
Size
391KB
-
MD5
311c81f0ac007acf327335c85620ca01
-
SHA1
5c442e95ddb5ca6c2b2f056d41f0bdf19a16b67c
-
SHA256
39da070a2696c9deb1da934d7833f37fab41c92b370eddc1970c726935b8d467
-
SHA512
8b010c61e0efcf4c4ed545a633b2c9b66fec45cd908924738d4e44e4c2042309a0cde26afe7cc47b9cd4c4eaa64a27fd285ba3c110e959e9a863700674b60975
-
SSDEEP
6144:uxCFpvb7oAiyO37HGOcSdIZPk+2wSdyxXgj7vvzWBcYlrcUk+QAVUZhBqP:nFtbUVDHuEePkPqxXaSBFdk+3qL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 311c81f0ac007acf327335c85620ca01_JaffaCakes118
Files
-
311c81f0ac007acf327335c85620ca01_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
y~'V4]R Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ