Static task
static1
Behavioral task
behavioral1
Sample
0fff862dc8f157e9aab390d4d948dca0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fff862dc8f157e9aab390d4d948dca0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0fff862dc8f157e9aab390d4d948dca0_JaffaCakes118
-
Size
2.0MB
-
MD5
0fff862dc8f157e9aab390d4d948dca0
-
SHA1
5ed979e7ef326de0c42353e265b9efc957704a1b
-
SHA256
e65cdc73b05330732b55e9ac55906eb62af53e5a2b7b1d4c98d2e4eb01e14b13
-
SHA512
671a6cd70266a8c15ee124aed1f2c15d61ea8dd399e124e2144ab8374f30f314c7bca8da0b34e8034e6f51d932f57c941fb1235778e246542841db0cc7b5e523
-
SSDEEP
49152:2pVcMpA6I47qaN+rW99WJO5mz4iCmX5VgcL0/8G2Jb/jvrnzN5aYk:2pVXI47qaN+rW99WCg4tmJi80/8G2JD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fff862dc8f157e9aab390d4d948dca0_JaffaCakes118
Files
-
0fff862dc8f157e9aab390d4d948dca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ