Static task
static1
Behavioral task
behavioral1
Sample
3beb1fd8946ef3d9378bf3d42476a631_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3beb1fd8946ef3d9378bf3d42476a631_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3beb1fd8946ef3d9378bf3d42476a631_JaffaCakes118
-
Size
532KB
-
MD5
3beb1fd8946ef3d9378bf3d42476a631
-
SHA1
7d48f3a14cf23c74db900cafd84ee1e7fd7cfe46
-
SHA256
e9a8bf4f31da146761af10a16f17c402c2de1bfbafe5f770b1ffadbe373a2aa4
-
SHA512
e9f755cfca4ca269d4e426cd1ce451072d839b37f4d3daec2661f8ffb1ae726056692ef531fb622b3a0f6d6331799e9058a406bcba0ec8e598738d3bd500c2b8
-
SSDEEP
6144:QAL4KvK5CcGQkPcWVEBomeiUhNDbD4YQZ/ia02Sdj/4KngWIq6jRkyi:ZLpvpQkZVhhRbhgia02SKKngWIjn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3beb1fd8946ef3d9378bf3d42476a631_JaffaCakes118
Files
-
3beb1fd8946ef3d9378bf3d42476a631_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 529KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ