Static task
static1
Behavioral task
behavioral1
Sample
0d8007c628a5c009d3d2b6aa53e6cc0a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d8007c628a5c009d3d2b6aa53e6cc0a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8007c628a5c009d3d2b6aa53e6cc0a_JaffaCakes118
-
Size
224KB
-
MD5
0d8007c628a5c009d3d2b6aa53e6cc0a
-
SHA1
3ad7496a74762cae06b394a32dc8832611b20df8
-
SHA256
d26dc3afdc474fc8170c92fabdab98bf97176635d36fc3a1c8a7f76e77f43b6a
-
SHA512
6711b4bceda2396f63cc97b26e4884341bca1625a627044ce65195f0d787d8697fb8f550008b5e6ef9771a149aa010d96116dc9cae44728823014f70ec49c596
-
SSDEEP
3072:1ma9v8Isvh3Tg93yDxkWD8bENk4Dy1lxeMV37q/LwmfYS:Up3Tg93yDxkWD8bERDy8MFq/Ldw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8007c628a5c009d3d2b6aa53e6cc0a_JaffaCakes118
Files
-
0d8007c628a5c009d3d2b6aa53e6cc0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ