Static task
static1
Behavioral task
behavioral1
Sample
299e6170e415d92ac5eaeaaa530cc691_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
299e6170e415d92ac5eaeaaa530cc691_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
299e6170e415d92ac5eaeaaa530cc691_JaffaCakes118
-
Size
216KB
-
MD5
299e6170e415d92ac5eaeaaa530cc691
-
SHA1
ab7e8eebec62b4d00ecaee6cc2c08aba73a2ad84
-
SHA256
74ad9e57388d7b225735c24b2530549973f9da4c9b1e8688d39e9e4a28ebf472
-
SHA512
d1de2b7addf63cfbf24adcff6ea517b9df6d284005a883c84c7a9a277259d551ac46cda248ef4082ce77efaaea063237ee90626bd7becb264a89eea97c970bdb
-
SSDEEP
6144:5f68uomXXPopeICUoUpYXN59pODhTP7XWj:5f68IXPopeICUoUpYXN590JPKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299e6170e415d92ac5eaeaaa530cc691_JaffaCakes118
Files
-
299e6170e415d92ac5eaeaaa530cc691_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ