Static task
static1
Behavioral task
behavioral1
Sample
21916cc20b10b9f20bb2c3b191135f5e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21916cc20b10b9f20bb2c3b191135f5e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21916cc20b10b9f20bb2c3b191135f5e_JaffaCakes118
-
Size
224KB
-
MD5
21916cc20b10b9f20bb2c3b191135f5e
-
SHA1
ff176e7fcc2030601cdb2d4e75a35905de0f2305
-
SHA256
61d700f0009d2ed258ae21f707e046b24699120bcf088eb902d9865e88387d55
-
SHA512
9883f18c1ca818ac6ab06a17195a4def643165c5deccbb3b7a880e6d844dbd1fedb129a7fc547a159d24eb4cb235a53274d93ad1ce6f844b3f9017957a14f809
-
SSDEEP
3072:x2QNZDy5tNk68BKtkQwZRpV6yqPZobjvgIqYfmdJ5jZMF79q17/d60gJFvOGDA1N:x2My3Nk68BYkBIBHWFxI7V2MGDAh0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21916cc20b10b9f20bb2c3b191135f5e_JaffaCakes118
Files
-
21916cc20b10b9f20bb2c3b191135f5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ