Static task
static1
Behavioral task
behavioral1
Sample
0bec3d273f515bf5201f8e105b20c294_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0bec3d273f515bf5201f8e105b20c294_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0bec3d273f515bf5201f8e105b20c294_JaffaCakes118
-
Size
944KB
-
MD5
0bec3d273f515bf5201f8e105b20c294
-
SHA1
9bb367cb9cda49e1b8191a629c052d37bcd0eaa9
-
SHA256
145c0a75b153103b0393ef16827f1e4047205566261834cf66d53ba724ae1453
-
SHA512
175ff33e285da284dcfaf05e84892727d167174541ae67399c90a2d306c91bfd30ca2200c3ef1fa56d7624542e37d92f3f5c933424b691efafb6676e62fc5602
-
SSDEEP
12288:pFW3FQvHob7beW46L0MPRxNE5sqkzBRiFGq9CLRoWAMNgbBLXQSKEY/YECEwvY8a:ZPovjlqkzHwGfzWCYvEg74hDkF0n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bec3d273f515bf5201f8e105b20c294_JaffaCakes118
Files
-
0bec3d273f515bf5201f8e105b20c294_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 932KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ