Static task
static1
Behavioral task
behavioral1
Sample
2930e966fc07316964eb1c80da905d26_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2930e966fc07316964eb1c80da905d26_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2930e966fc07316964eb1c80da905d26_JaffaCakes118
-
Size
292KB
-
MD5
2930e966fc07316964eb1c80da905d26
-
SHA1
b591bc0d3a11ea8a3f478c51e739fd2bf896d5c1
-
SHA256
8217d3483984aca86dcd6cd6f5d6b03f89ce1c0d969657a23f5b7cadbe9b6edc
-
SHA512
519aad78cf5532f2be4f43d43e053e31ab4b1007591e48b601fdbb04b7f2c32b0b54f370d4d3fa7c5a11ba5ac211f43dded55df7e944eecd9f7e9eaf0b0446cb
-
SSDEEP
6144:Oo8hA6xuwE8VGAMr/HGsqdpEiGVz5mq0lVXoVOaS/VBG8D:YAcE8sAMr/GJdpXGV1mq0YVHMI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2930e966fc07316964eb1c80da905d26_JaffaCakes118
Files
-
2930e966fc07316964eb1c80da905d26_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ