Static task
static1
Behavioral task
behavioral1
Sample
500ea89f7af90595e91e45d97fc0d06d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
500ea89f7af90595e91e45d97fc0d06d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
500ea89f7af90595e91e45d97fc0d06d_JaffaCakes118
-
Size
375KB
-
MD5
500ea89f7af90595e91e45d97fc0d06d
-
SHA1
c14f0fe9b31e955a9f50aba6ccf2be726ba536b0
-
SHA256
462f9d1b7703315479616fabe3f3228963ca332897ad5664959dd94aade43b1f
-
SHA512
74f32b085b798e0336a0bb4e1f8581ab894e7ea36fd6be50122ecd34b567cd83387635acebaeab5666e7fc4b0888320637c2b6f00c37af4473df4adc6f3a2d68
-
SSDEEP
6144:+XTcH1fu9uKdgSZvy4raeXjuMkqryNPs0tFoqn9onD4Epv:+D4fqRBdy4r3XyMb6U0tFx9onD4Eh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 500ea89f7af90595e91e45d97fc0d06d_JaffaCakes118
Files
-
500ea89f7af90595e91e45d97fc0d06d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ