Static task
static1
Behavioral task
behavioral1
Sample
3fc8fd0de54ed89c94e2213ccff44808_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3fc8fd0de54ed89c94e2213ccff44808_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3fc8fd0de54ed89c94e2213ccff44808_JaffaCakes118
-
Size
407KB
-
MD5
3fc8fd0de54ed89c94e2213ccff44808
-
SHA1
dbc3a1a31a2f7e04db4c5cde20981ab48c45a04d
-
SHA256
e60600e65e841324beb2354e3e93fbc9e75d3959549e369c0c11c40fe71c1bb4
-
SHA512
d57657d06c6a98604b2f4e3d3bd97ba826d91a888030734c224db5edda46e2f73e67def41c428da7eaec1234b5f68ccbb5a862f9c5947f639deabf067dc09212
-
SSDEEP
1536:3rOfaQFrgUMCOX9Cjce2syzHG1kHemyhQ:3aHVMCOX9qkHHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc8fd0de54ed89c94e2213ccff44808_JaffaCakes118
Files
-
3fc8fd0de54ed89c94e2213ccff44808_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ