Static task
static1
Behavioral task
behavioral1
Sample
197dce9c0154db072dd02ad28a72a879_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
197dce9c0154db072dd02ad28a72a879_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
197dce9c0154db072dd02ad28a72a879_JaffaCakes118
-
Size
15KB
-
MD5
197dce9c0154db072dd02ad28a72a879
-
SHA1
718b9e59442e91e978b8d127d0fb8b17386d70a6
-
SHA256
611886c08b63188bd4149a47c0c3f243d508f5ae6c4994b83e3b1767a0e8ca1b
-
SHA512
88d479523eb7238c4a127e5cedff683f90d6aa61509147276892cb79c808c41da227d5cd424a839fafbc7c6a83e2456d08fbef11f91a7df299120ee0ee5e0630
-
SSDEEP
192:inUrtAwKbLq0+4E0f5OpWLv7yUJ1LHpYZX2fWqraUBSqrD0zWWhPBalgsCxv:zWq0+j0kWDplHpYZXtqraUEqrDa79MS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 197dce9c0154db072dd02ad28a72a879_JaffaCakes118
Files
-
197dce9c0154db072dd02ad28a72a879_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ