Static task
static1
Behavioral task
behavioral1
Sample
1994ea1237120a78310aefdd05117830_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1994ea1237120a78310aefdd05117830_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1994ea1237120a78310aefdd05117830_JaffaCakes118
-
Size
548KB
-
MD5
1994ea1237120a78310aefdd05117830
-
SHA1
dfcce755cb873cf3c7e215dc75af3be8a2021959
-
SHA256
c906a39f072bdbbbdaccebddfe0360fa23fcc1bc88fb33cc20f6060ac5668485
-
SHA512
434d511a6191d5a9f036efcbe10e01419b21cda3db093b4ea795d4d1b7c376a6edb6c4c130188690d1ddfdabceacda8a7d0361b4bbab446efbd04de6077d7082
-
SSDEEP
6144:33k7BXlsqYX3Q2LpMfaiK+hDRs60UIk7rTygpLtZ7GfdXZn4tO:Hk7U02wK+hv7rTHpLt4pds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1994ea1237120a78310aefdd05117830_JaffaCakes118
Files
-
1994ea1237120a78310aefdd05117830_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ