Static task
static1
Behavioral task
behavioral1
Sample
350f74d4a3b8b25e003da2d08b30b865_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
350f74d4a3b8b25e003da2d08b30b865_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
350f74d4a3b8b25e003da2d08b30b865_JaffaCakes118
-
Size
11.0MB
-
MD5
350f74d4a3b8b25e003da2d08b30b865
-
SHA1
51a0d53080a2025bbac96186d3a2229f9ce04747
-
SHA256
a53bafb73f4b617b14a940e4fa05ab5ee6b7c7d90306d29a7c6fb9029dc5f6cb
-
SHA512
ab427ecfeac59194d938028b820abfa7034e9638aafbbbda7be12dfb6db058a543a9f98b19f006e5e202c52d7fab33a11a489fe79c2f655185de7abf8c6594f1
-
SSDEEP
384:EiDRpSk/fW+9nYMQL//bJlZYNJyN42wh7izfoSkbgaJ+W6z0NgJ:vpS6fW+9nEDlQryyBi0Po
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350f74d4a3b8b25e003da2d08b30b865_JaffaCakes118
Files
-
350f74d4a3b8b25e003da2d08b30b865_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ