Static task
static1
Behavioral task
behavioral1
Sample
a41c6d16ba1fbda0dcfa1fc5d9c3c290_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a41c6d16ba1fbda0dcfa1fc5d9c3c290_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a41c6d16ba1fbda0dcfa1fc5d9c3c290_JaffaCakes118
-
Size
113KB
-
MD5
a41c6d16ba1fbda0dcfa1fc5d9c3c290
-
SHA1
2e7697855bcde8129e638c8f6a68428bbc7484ff
-
SHA256
2faf6f0ed0364eb08a9a683a861b8d84c7aea977e746464c1a05b8e64b2216ac
-
SHA512
483dda61e9df3941eebb9e04ac5dc2328c09ff31a344c4797498d941f68c96fcf071b1ff2a85f707a3bcf76bf06cd91f19f851931eb39fc88f0e430a246ffe57
-
SSDEEP
1536:FHV/+KqWUAaWuCQO3iFbYrg+7zV5xH8hXVz16mhpKGbBsxKyip:V+euCh3ix4RVDH8hXVz16mhpKGbBsxK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a41c6d16ba1fbda0dcfa1fc5d9c3c290_JaffaCakes118
Files
-
a41c6d16ba1fbda0dcfa1fc5d9c3c290_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Zfc3>(p Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 575B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ