Static task
static1
Behavioral task
behavioral1
Sample
09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09e12449885edc41305d2a42f4f95742_JaffaCakes118
-
Size
188KB
-
MD5
09e12449885edc41305d2a42f4f95742
-
SHA1
383d533d13db70e59b92164ed03c1f344f2bad3c
-
SHA256
9f398baea13fa0e144f5c19cc511b0fa79bf36bbe506486d1b8f14beb398235f
-
SHA512
28431fa08597aafbbc3984bfbb0fad3d3d68d918b390ae5b5f3e3912e9f54cde6da0e285f82065b1ed7d14896a4a0ca075b11515ff7ca4b2a306903d5f661fd6
-
SSDEEP
3072:8dUIpnVMvKbFbw+IcbN5qZOH9yQXxUte33Dp/Br/dA6R:chFYcbJ7kenDbS6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09e12449885edc41305d2a42f4f95742_JaffaCakes118
Files
-
09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ