Static task
static1
Behavioral task
behavioral1
Sample
97ae3e589c2bcf6d85b3172d65289268_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97ae3e589c2bcf6d85b3172d65289268_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
97ae3e589c2bcf6d85b3172d65289268_JaffaCakes118
-
Size
17KB
-
MD5
97ae3e589c2bcf6d85b3172d65289268
-
SHA1
2f80efe4704ba727b9631a64b7d4a384c478bca7
-
SHA256
28dcab7b4ecd7ba7d45d8a37b53f86778ca0620fa6f5e603c2bf89a179d79e2a
-
SHA512
559a8ca72e0e047a4a189693f2d7b8ce2e20a4fc8aed6547d17c83deb7c2503f06bda54065a4181146c5c3b5ddcaf70c9c9f47a9b4f4e1f94a058db2e41d54fc
-
SSDEEP
384:6v3AIwO8+nQNbnbVavRotJuNr9GvxPWsPBn7nDCrQ:6vwhO8ACRJc5GZFJ7nDd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97ae3e589c2bcf6d85b3172d65289268_JaffaCakes118
Files
-
97ae3e589c2bcf6d85b3172d65289268_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ