Static task
static1
Behavioral task
behavioral1
Sample
b7b54500b995dcd5ac2e9f0b5bdd0c23_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b7b54500b995dcd5ac2e9f0b5bdd0c23_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
b7b54500b995dcd5ac2e9f0b5bdd0c23_JaffaCakes118
-
Size
817KB
-
MD5
b7b54500b995dcd5ac2e9f0b5bdd0c23
-
SHA1
011ad6cf3d6c092d7892c3742647c38e157ab475
-
SHA256
4272b1d0b38f1c3e9ef6b63582035c96bef09292be1224918cf4ea6cbfda3de8
-
SHA512
85de68c3ed5e8c7e3ae4a766796296be20bdab153b4c56951af145272ff069264e99c0682042d846fbe10d31989ffcd13997dddada535e02bb66b2350c63f14c
-
SSDEEP
12288:JgVk00EpT/T65nVv+2K8Ycy2g6ULSo85RAJAN7Ux02/5kyxfi1JULXxnZ/R98KKW:WVdVTw9KaNo84JUAJKXUf/RGKKY0vI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7b54500b995dcd5ac2e9f0b5bdd0c23_JaffaCakes118
Files
-
b7b54500b995dcd5ac2e9f0b5bdd0c23_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
uy; )= Size: 781KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ