Static task
static1
Behavioral task
behavioral1
Sample
18d16c4568689f4a1cddf3681facabe6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18d16c4568689f4a1cddf3681facabe6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18d16c4568689f4a1cddf3681facabe6_JaffaCakes118
-
Size
269KB
-
MD5
18d16c4568689f4a1cddf3681facabe6
-
SHA1
21bc13d371b25b4960b6e835164615e03172a80a
-
SHA256
541d3050af8b966026ec1962a26c778f410814cfb699e3f77b79b3b9c99bd97d
-
SHA512
d5b54af44e65d29411b50ce7b490e329c693964950b955cddddbdfc4b4bf0e7f5a7b88dc74a62a716914406e4a52c656f5c4c8388b48c57bd11133b0023ef7de
-
SSDEEP
3072:PuI5/QdxaZb1giKlH2pWiHF3lH/wqI5/QRxaZb1giKlH2pWiHyAJk/bSQSY8:G2QdxAb1gX7iHFN2QRxAb1gX7iHyTEP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18d16c4568689f4a1cddf3681facabe6_JaffaCakes118
Files
-
18d16c4568689f4a1cddf3681facabe6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ