Static task
static1
Behavioral task
behavioral1
Sample
058c0c04dd4856cb55abe7a2dfd3c2f0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
058c0c04dd4856cb55abe7a2dfd3c2f0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
058c0c04dd4856cb55abe7a2dfd3c2f0_JaffaCakes118
-
Size
1.1MB
-
MD5
058c0c04dd4856cb55abe7a2dfd3c2f0
-
SHA1
2e83e5300eb2f6780d93c973f50974286920e9ee
-
SHA256
67cd7aa3c1664a38b591097a1c192bd4b6e2d5400ca46abd116c4d4a5c5a2489
-
SHA512
94268d1f8df0c7eaba7cf8cc86b0b5c07c26369ff29435a3f898b332c9f3dd1f79acb64d0ab42521e64c09bfc8821924dd68fe95ce305b32e17fdc78c2e6649e
-
SSDEEP
24576:uCuHG36sIY+BvHjx7Wn+z8QbXStS2BuQ0MCacMoh5oI4Qc:uCuH8StDRW+BLoSxQ0MMMoh6I4Qc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 058c0c04dd4856cb55abe7a2dfd3c2f0_JaffaCakes118
Files
-
058c0c04dd4856cb55abe7a2dfd3c2f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 925KB - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ