Static task
static1
Behavioral task
behavioral1
Sample
21759eb153ca1940c18ec22f80c0b84c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21759eb153ca1940c18ec22f80c0b84c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21759eb153ca1940c18ec22f80c0b84c_JaffaCakes118
-
Size
764KB
-
MD5
21759eb153ca1940c18ec22f80c0b84c
-
SHA1
028445a08ec17e2fa5d362575038536b24fc4fc4
-
SHA256
6f04f9196bafd0ca4224f10e5a13279ef53fad00265f7fb5bffe109f417b3604
-
SHA512
344c6699c6b29be9796bffe5b9d00b2f53d2e6cf24dbe40c238892fa80d2689e4bc7d563840308dc621cdbbe3104aedb78fc5d12e48325a6cdc62e350546b792
-
SSDEEP
12288:tYLLZwfebdHJQ+zvJUNp31PVYAHFHJa4DbK/wKCnX27jUPwGxqqT6e:e1wf6pB7+p31PvLqIX27jVc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21759eb153ca1940c18ec22f80c0b84c_JaffaCakes118
Files
-
21759eb153ca1940c18ec22f80c0b84c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 720KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ