Static task
static1
Behavioral task
behavioral1
Sample
5d31f94b43f28b1b30427b0a34d59c62_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d31f94b43f28b1b30427b0a34d59c62_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5d31f94b43f28b1b30427b0a34d59c62_JaffaCakes118
-
Size
4.7MB
-
MD5
5d31f94b43f28b1b30427b0a34d59c62
-
SHA1
3c4ad270ac678a4e31ccc4f66fc67f52ce9fd74e
-
SHA256
70bc22f1a8007dce204b7d49120e8355b83f1a5f977e887ed61abc463dae3fd1
-
SHA512
51834c950c6a1a3aa657b56466d431aba3fc550ebc6e515a50a1ed3a69ca2c7cd3b5d14ea0d4d312f2a0a4395dcf291b7546e63a4b6ff3dabc5bc439dc2be456
-
SSDEEP
98304:ecc7KJC9weeHAQAkOy+cRTBRaE1D3fUrmVIGKzrIHa5c8kOhmuVadLtvMmBWLv1e:eYC9wecAQHOZMBf1D3fUr3G4rI65cWHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d31f94b43f28b1b30427b0a34d59c62_JaffaCakes118
Files
-
5d31f94b43f28b1b30427b0a34d59c62_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ