Static task
static1
Behavioral task
behavioral1
Sample
6de7413128b8f1390f8346386b3b1c91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6de7413128b8f1390f8346386b3b1c91_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6de7413128b8f1390f8346386b3b1c91_JaffaCakes118
-
Size
32KB
-
MD5
6de7413128b8f1390f8346386b3b1c91
-
SHA1
306c3140bfb1d5f7f1cb5582d1b7b604e0fc7cee
-
SHA256
5385c57cbda11894674f924af9b685638ee2baaa5a5ae1e96aa1da0eb6da8c39
-
SHA512
0f2ce8701a4c01df62fcc05c359fa1fc4d2f6b90599c438ae6add9eaf9d68c078feb0425bd27d5e13c4221331610e26449e2c90c5c88639c08cd3f5e7cc8a0bb
-
SSDEEP
384:aLYeGjfMecbsLqfgkxp5ziWw4kLAfeoJYi2VesvohLVkLDOHYCFXPzlpmIMxTZiK:E7GjfMRsLThNpVjo+mF7sr1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6de7413128b8f1390f8346386b3b1c91_JaffaCakes118
Files
-
6de7413128b8f1390f8346386b3b1c91_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ