Static task
static1
Behavioral task
behavioral1
Sample
6a53a9cc61e4c69958cf54f7cb18f5ed_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a53a9cc61e4c69958cf54f7cb18f5ed_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6a53a9cc61e4c69958cf54f7cb18f5ed_JaffaCakes118
-
Size
484KB
-
MD5
6a53a9cc61e4c69958cf54f7cb18f5ed
-
SHA1
20969ff3139fa8584d5fbef3586de7b894b468a4
-
SHA256
b1fd3292d4a358db8b0167f471a2aee4046f49a6c9093a8596a537bc9c5f44d4
-
SHA512
7e5ba96fc7bc582b36270b5e26f505328686f1e95757fcec098132a1bf4c464fd1d5944194caa1dbb7ac9fdcbce6168e81e1d90e5f278b4f63908e9a5e49e2f2
-
SSDEEP
6144:9/8Wk7AvIH5jpHvxlEnzNE+9Z7dXIkU74EJeBSdn1/HK1/0YGtLltL7LS+sCC0UY:9/PkcvIZANE+9ZhjJ2eBin1vK1c5UA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6a53a9cc61e4c69958cf54f7cb18f5ed_JaffaCakes118
Files
-
6a53a9cc61e4c69958cf54f7cb18f5ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ