Static task
static1
Behavioral task
behavioral1
Sample
2e429ace156d1e522c87836ed4c9f108_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e429ace156d1e522c87836ed4c9f108_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e429ace156d1e522c87836ed4c9f108_JaffaCakes118
-
Size
488KB
-
MD5
2e429ace156d1e522c87836ed4c9f108
-
SHA1
cff0993d7e62af6e7c703265ff8d8ff605b45942
-
SHA256
bff0f830af46bd0d2a5c1aca8a96695613bd6bb771b5deb1ab844a2ba6d2f169
-
SHA512
57056a64dcaf522da83a7d82d8c310c81d149f281c0ad1aa3b5a5f3f037331cc15f2d25051886fcdc1a91d9d2e15273e69ce538a035ec93657a8065cbd58f5bf
-
SSDEEP
12288:mlV6UrjnjpWM9ZPe8DXfQqWB42r9zTOEchM6UJ:m9jjq87oqe4QZTOEchs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e429ace156d1e522c87836ed4c9f108_JaffaCakes118 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
2e429ace156d1e522c87836ed4c9f108_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ