Static task
static1
Behavioral task
behavioral1
Sample
0d1a558ceaa30a933fd456bcbb3c1d94_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d1a558ceaa30a933fd456bcbb3c1d94_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d1a558ceaa30a933fd456bcbb3c1d94_JaffaCakes118
-
Size
896KB
-
MD5
0d1a558ceaa30a933fd456bcbb3c1d94
-
SHA1
e6200dd42a48204b4e994f94a0c5fddd04f80404
-
SHA256
c43e2c7ab52bd24b17c6f5e519714df6376eb4cdd43974c85ef8d7a7fb68c3cf
-
SHA512
d50acbf578a0c70c0be4581e8b74f2303e2882d81329d7090cb13f75785a48826d53788a69e3e631d03489053f85a730f6564f8831a1de4e0ef2423b2e890c5d
-
SSDEEP
12288:wlyOEIzifoEqqx2XcLnsYRg87cvCPAq3djaCRvUXC9KykRvWIb0aeeXXR+oGElk7:hAXOsH6raCSXC9ZQb0beRbGFz+m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1a558ceaa30a933fd456bcbb3c1d94_JaffaCakes118
Files
-
0d1a558ceaa30a933fd456bcbb3c1d94_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 890KB - Virtual size: 889KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ