Static task
static1
Behavioral task
behavioral1
Sample
8356737a7d75c96a63c2689035f53865_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8356737a7d75c96a63c2689035f53865_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8356737a7d75c96a63c2689035f53865_JaffaCakes118
-
Size
457KB
-
MD5
8356737a7d75c96a63c2689035f53865
-
SHA1
cb1322075624e6d752a6230ce66f6a0cb4d2ca74
-
SHA256
11c63e3b8e106554f40401cb5bc128050402987388ab7c3b796cf42acfaad487
-
SHA512
a5e878264360b9c0c8a8a7c63e2491dce1f7076dc7c66f8ca088c22d28c6bb9c3110d18e23cd6d6f839e159b0ff90e6bbee0479ee0ada1c57db26bf12ee45f77
-
SSDEEP
12288:VFVQe+V+saMMt6DmD1UULmAx55dwNaoeBDE:VLQeyaMVaLmOz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8356737a7d75c96a63c2689035f53865_JaffaCakes118
Files
-
8356737a7d75c96a63c2689035f53865_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
TMAa Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ