Static task
static1
Behavioral task
behavioral1
Sample
8bf16cb479b4ac76e7152232762326f1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8bf16cb479b4ac76e7152232762326f1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8bf16cb479b4ac76e7152232762326f1_JaffaCakes118
-
Size
21KB
-
MD5
8bf16cb479b4ac76e7152232762326f1
-
SHA1
59ef6fc2de8718ff388e826ea4734a56b0926b31
-
SHA256
25859d5aa67774890ee5a6880d4839b03f48f764f90b596c93c4d266f3127162
-
SHA512
5feba84eaef1287f30f7770b8cb346a9f4f96d875289aa06eb683fd24819114fa9b509906c88bd2c28008bdbb388f578f1a7b4c5918eea731e157fe0ba9589ad
-
SSDEEP
384:E01qECRh9eLVMDtsfPzSW2BTTlD/iZwuw9MnouzsCwWuW:E0LCRhqVMDtszSW2T/t9MbLwfW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf16cb479b4ac76e7152232762326f1_JaffaCakes118
Files
-
8bf16cb479b4ac76e7152232762326f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ