Static task
static1
Behavioral task
behavioral1
Sample
17986f8bfc99b94785cf9f44af254d78_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17986f8bfc99b94785cf9f44af254d78_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17986f8bfc99b94785cf9f44af254d78_JaffaCakes118
-
Size
740KB
-
MD5
17986f8bfc99b94785cf9f44af254d78
-
SHA1
2ff0d2899add3b4163d398098bed481d98729b8b
-
SHA256
d9b1f88cc9938c2b91f417aac8a849051312a8f647f5582ee9b4b407c2c54047
-
SHA512
3ae587267b0949ce2317680ff46c6fb964a6d936a52a3fe49b6dc1c542d37ad21f28750faec0e4422f0e4cce550090e4828913ee017b91d5b71a934edc978111
-
SSDEEP
12288:hXl8eLIz3ZhfcCauJl7OuU0tCaN+elrrI0R5m2QHDlVilNdcsUIVAKkFhhTMFmWe:8eLIz3vfc7OAxaUelXI0R5bKUcsU6T2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17986f8bfc99b94785cf9f44af254d78_JaffaCakes118
Files
-
17986f8bfc99b94785cf9f44af254d78_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ