Static task
static1
Behavioral task
behavioral1
Sample
21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118
-
Size
797KB
-
MD5
21cf2423cc48b1dd2496bc34b435a932
-
SHA1
639257ece6992db28a2962a8bde071507ebfce55
-
SHA256
ff3b095fdcb45b12a60ba1c914578da6233a047e1111d53c7640db20e9e208c7
-
SHA512
0cb636f041c82bff1b6925f740a2086fd885de12751d15a6bd98daa7d088be46cc5fc6fec650bbf36fd36eeee58acdc0360be405c6158f5137a2a328cd05f0e0
-
SSDEEP
12288:Hj/kT1PyjoPiAYIvXGtU8VqDPvlZSfpjy/LuYD3Njb0ZM9+LNDiz6vrEFERxv951:D89b7CCuUCjcA6cLvW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118
Files
-
21cf2423cc48b1dd2496bc34b435a932_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ