Static task
static1
Behavioral task
behavioral1
Sample
b41244444d5b6c22fa097c593dfdd163_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b41244444d5b6c22fa097c593dfdd163_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b41244444d5b6c22fa097c593dfdd163_JaffaCakes118
-
Size
1.4MB
-
MD5
b41244444d5b6c22fa097c593dfdd163
-
SHA1
b18aef76ecfcc24ac9f70f8370fb73b1a4ec9ddb
-
SHA256
8f1d3086304cbf3262a6089856dbf11ce6c30e2a423f8af401a6c708f5baf739
-
SHA512
8a6ec837737f0a8156478a88efd1b213c698b1254e2925fb7084a6943334da870847bbfb7da08b1a14d34d98a5b9630836eb93ba87dadf8d91e421efb3b4db89
-
SSDEEP
12288:1R/BscR/BsuaiGnCa8JlqAB/jEMt0DWsFKJll94fl+mZoEBFjSRDWQ:1R/zR/QCa8SMjEMt0DSlS9H+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b41244444d5b6c22fa097c593dfdd163_JaffaCakes118
Files
-
b41244444d5b6c22fa097c593dfdd163_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ