Static task
static1
Behavioral task
behavioral1
Sample
0c4c6c0ff1466acb2a21253cee0be012_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c4c6c0ff1466acb2a21253cee0be012_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0c4c6c0ff1466acb2a21253cee0be012_JaffaCakes118
-
Size
155KB
-
MD5
0c4c6c0ff1466acb2a21253cee0be012
-
SHA1
72d385312309c9a0ae22e7cd299c8a48923495b5
-
SHA256
d7c6b843db1bfc6f2684063491e066902ddcc82ab3393d59f994db4678e8918d
-
SHA512
dc77dbb3575c8762ac58b3707a6f71e760c7052cab535645ccd3b8e10630601f8387eea3cb883c04babbe3711bed0c2c254052c08cf51dc4021b41f27de3c5f2
-
SSDEEP
3072:nq8abq5SvGCPraBIpPQMPozgEAQIIOYWpITP4ZZJph:nq8C+SvGgraBCDorABvI7uD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4c6c0ff1466acb2a21253cee0be012_JaffaCakes118
Files
-
0c4c6c0ff1466acb2a21253cee0be012_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ