Static task
static1
Behavioral task
behavioral1
Sample
227317b8757c072eb1edcf66b20b51f6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
227317b8757c072eb1edcf66b20b51f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
227317b8757c072eb1edcf66b20b51f6_JaffaCakes118
-
Size
2.3MB
-
MD5
227317b8757c072eb1edcf66b20b51f6
-
SHA1
483f5bd3bb4261f264660a9418e69892eca80a7f
-
SHA256
e818f25b17b630e133770e7283ea53f791a24a97cdde63c1226cf977632319f3
-
SHA512
6d333e5f321d43cdf5ee5432054c7c3fa381afd7bfc81db815bcfc3b60dd66001e364cbe0b0e2177141ef5801544e4853bf1292e523c1e9b5a60f834b341535f
-
SSDEEP
24576:pEm6aNq17m9zF/6Nr2vDfiRGxndYVsuKoMeeQNzl3yyZc4PGWU/vxrtkwkunR5C:uvkBN5U6hnOneagWsvxhkmE6Hw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 227317b8757c072eb1edcf66b20b51f6_JaffaCakes118
Files
-
227317b8757c072eb1edcf66b20b51f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ