Static task
static1
Behavioral task
behavioral1
Sample
579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
579506247c2dae703d6593980e3d9ed1_JaffaCakes118
-
Size
296KB
-
MD5
579506247c2dae703d6593980e3d9ed1
-
SHA1
9fc38df85161d0f71ca99cb011df03bd2764d25b
-
SHA256
019114995144b61e8c5efba8fcb317aa1e73a2fbd6275faf2dae8205080b67cc
-
SHA512
e23bf952d0ab75000a725f32ef5e43c1d2f0de6dd82ba3f3bdd8606254959ddc3a6d3605b7eae807983f7314b0f05dec6c91b33a4398859b1587618075864243
-
SSDEEP
6144:VbprdJH5x43qQmNuLI0MfgDMkL7boLiUYoQ:Zprd23tmQLAf0Ms7borW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 579506247c2dae703d6593980e3d9ed1_JaffaCakes118
Files
-
579506247c2dae703d6593980e3d9ed1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ