Static task
static1
Behavioral task
behavioral1
Sample
328fa11435d049803008886de8c70392_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
328fa11435d049803008886de8c70392_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
328fa11435d049803008886de8c70392_JaffaCakes118
-
Size
1.9MB
-
MD5
328fa11435d049803008886de8c70392
-
SHA1
9ed0cfe5451fcd410b10d47bfd803ffbb24add73
-
SHA256
b840a55b415479b80be3cce3b305cbfb2fb453646497e250de0722f0eb7af1aa
-
SHA512
fcc3e31e5600516021cebad2fd7feba64a07182f3c8c2c2c35072833f408a0995d9a3398dec198457c57d9fe601dcbb4a397a4e6ee3c53c480a749d72238142c
-
SSDEEP
24576:65ZPeZPH3YSNn9wW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJDQOKPAY+j:65ZWZ/Y3asY6DwOBfrnvV7UeWtwSj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 328fa11435d049803008886de8c70392_JaffaCakes118
Files
-
328fa11435d049803008886de8c70392_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ