Static task
static1
Behavioral task
behavioral1
Sample
131af0e4c40f5e7dfca711a45816fa37_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
131af0e4c40f5e7dfca711a45816fa37_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
131af0e4c40f5e7dfca711a45816fa37_JaffaCakes118
-
Size
929KB
-
MD5
131af0e4c40f5e7dfca711a45816fa37
-
SHA1
5c72ad82cd2da3807290c2d384546740097dd8c9
-
SHA256
f4d30cb13736e18e207fe01046a535f4152c3c9d0581214fd9caf8dc7f19e0ea
-
SHA512
dcb2d216965ec03d4cd691327f65a7f1ceede9253c0a16ab8c5d3aca66a6809c65637b264329ae76bae55927d5e6ced5a6f10297110cf5ac9e9af1e29d1bec19
-
SSDEEP
24576:iY7WkuuKVuKBWXmKyT6duKvvbyyUHb8V0Zpu9Aooo0:57WvuKV9BWbymveHAsC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 131af0e4c40f5e7dfca711a45816fa37_JaffaCakes118
Files
-
131af0e4c40f5e7dfca711a45816fa37_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 844KB - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ