Static task
static1
Behavioral task
behavioral1
Sample
a1a1450ae5294069a2f3445c0c45e514_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1a1450ae5294069a2f3445c0c45e514_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a1a1450ae5294069a2f3445c0c45e514_JaffaCakes118
-
Size
431KB
-
MD5
a1a1450ae5294069a2f3445c0c45e514
-
SHA1
ebf10a54521110f1f845c6ad0c7a9774813651de
-
SHA256
c75cc9c90f0125b6b5c6f5bd9d46a992da20fe01066283bb2bd3f6fd194ee19c
-
SHA512
cfe92a625bdd922a3959d4b2bccb1dff9e80725bcef146de97c7e6c18bf4f007a57d2c174e00b48223de7caf515247b4f1430ab23ee420a180ac130af56b8aad
-
SSDEEP
12288:ERJHURtWbrTlHOxhRqrQ1inx2B+hN6vI:CSUrTh5UkQBrvI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1a1450ae5294069a2f3445c0c45e514_JaffaCakes118
Files
-
a1a1450ae5294069a2f3445c0c45e514_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ