Static task
static1
Behavioral task
behavioral1
Sample
504a7bcfb8dd582325f07578a4cae9aa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
504a7bcfb8dd582325f07578a4cae9aa_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
504a7bcfb8dd582325f07578a4cae9aa_JaffaCakes118
-
Size
280KB
-
MD5
504a7bcfb8dd582325f07578a4cae9aa
-
SHA1
24ea884f4e05eff972ec1b30a4703f6ed413dfec
-
SHA256
47d5fdf486b53da3da2f8775e2ba5af60ad78f474162d32f7d8f8d35b7576cac
-
SHA512
fd53ce8e19d29c0c1637dbcaa861a351a4f0b2cc5fb094b1defaad1de403ebf30b0cafec14e9ec1a2d20b52de9824028b8aa044acb624e31cb249754549151e1
-
SSDEEP
6144:qpchMcHDE4wJ8f4sHembdhzM+4wr0eSTaaIYE:qahMcHPwyAsHembdxbr0VDE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504a7bcfb8dd582325f07578a4cae9aa_JaffaCakes118
Files
-
504a7bcfb8dd582325f07578a4cae9aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ