Static task
static1
Behavioral task
behavioral1
Sample
370d3bed11f428f7d0a1948b25558cab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
370d3bed11f428f7d0a1948b25558cab_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
370d3bed11f428f7d0a1948b25558cab_JaffaCakes118
-
Size
146KB
-
MD5
370d3bed11f428f7d0a1948b25558cab
-
SHA1
34dd00cef29883c0772eb9a378c987b5ec84c41a
-
SHA256
f663fb9e7174419931b6a9849d9d8850aee10b1be52f1691bb22e0ce60cb5283
-
SHA512
e5a58cd6007dcc96e487b8eac6cb1bcb97fc67f6a3f6eda9b54225de00ecaa57a68279e8faa60a18cb2f45d3fe0cd805819cc78378aeba7b5b7e2d6e4b00053d
-
SSDEEP
3072:RxmKKFPbhtFFZN8k7rVhwfdk1f4qLEy/Cn68C3AhnhP0tZQfOufz:PKB1tFFl8mAWr/w689oefOufz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 370d3bed11f428f7d0a1948b25558cab_JaffaCakes118
Files
-
370d3bed11f428f7d0a1948b25558cab_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ