Static task
static1
Behavioral task
behavioral1
Sample
475d2e28df7c1f766f5f2fb2cac0a9b7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
475d2e28df7c1f766f5f2fb2cac0a9b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
475d2e28df7c1f766f5f2fb2cac0a9b7_JaffaCakes118
-
Size
256KB
-
MD5
475d2e28df7c1f766f5f2fb2cac0a9b7
-
SHA1
72b2863054de78e322e48587f6dc7a38c066d7bf
-
SHA256
ca80be687e82846041dc9190cf68a12f9fba76502f66db81398219c7f2fa9699
-
SHA512
886ff187f991eee4be9f4af7e50bfe40ef774c128f57fd381a3b98185a441234dfb3d32b20baceb94290118ebce7ea28a48b06f62a47ceaf4caafd75a4c613e9
-
SSDEEP
3072:p9d/ztWmfHlFkYVJOAl+ZID0FjxChE2We+igZOpT9yVHAlOmoICAEPFWievFez2W:pX/5RVL0FHaft9ydAlOO49r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 475d2e28df7c1f766f5f2fb2cac0a9b7_JaffaCakes118
Files
-
475d2e28df7c1f766f5f2fb2cac0a9b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ