Static task
static1
Behavioral task
behavioral1
Sample
33115f19642e3cbac04ca2d248155277_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33115f19642e3cbac04ca2d248155277_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33115f19642e3cbac04ca2d248155277_JaffaCakes118
-
Size
456KB
-
MD5
33115f19642e3cbac04ca2d248155277
-
SHA1
60f774b2bb18ecc2bc882947806bbfad8e148b3a
-
SHA256
2a430af9d5073bc7d1cd2fc5cd88d604e4cc8ee357995cd5c0bd17da52299129
-
SHA512
cacc5c2f81efdd6c690013ffe5b402f88cf2a2da8062e82b9bddfa055bd2fd0166f7c66633fd04910ec10a3e9bcf1fe0b4cfa07ff4bd0cf0839c2f8989b11f94
-
SSDEEP
3072:VlNJHl+pGVS1OGW1dpgFztAYIpvfIVNE028qaI2kWujhFruyvd68YTkgiLCeMSCe:/SodpqtIbuyvvykkmyHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33115f19642e3cbac04ca2d248155277_JaffaCakes118
Files
-
33115f19642e3cbac04ca2d248155277_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 352KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ