Static task
static1
Behavioral task
behavioral1
Sample
1af08835ca6ee5711aad419f60133fc9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1af08835ca6ee5711aad419f60133fc9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1af08835ca6ee5711aad419f60133fc9_JaffaCakes118
-
Size
419KB
-
MD5
1af08835ca6ee5711aad419f60133fc9
-
SHA1
b346b26d35578dee5fa54350697d99d772c359a8
-
SHA256
86af889e7f9100c44a79aa48c8abb4d540c74b8c37496695f400159d1f3edc48
-
SHA512
dcfdffb2013bbea6045243ca6c416d9f8de210515c2c9c4e96e81c613acb95c7e9fabcddc7ba20a654c645a477694e7332d63b78413f63b2d9fa89aae4c7fec7
-
SSDEEP
6144:sN2XmUL3IGPnk/Hri704GPwZIct3zpRS6RQ+bwz3jNUBn:PnL4ik/HGBG4u2zp4Uq2R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af08835ca6ee5711aad419f60133fc9_JaffaCakes118
Files
-
1af08835ca6ee5711aad419f60133fc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ