Static task
static1
Behavioral task
behavioral1
Sample
373caf251e4d5114c08fed8879cbfbb0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
373caf251e4d5114c08fed8879cbfbb0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
373caf251e4d5114c08fed8879cbfbb0_JaffaCakes118
-
Size
27.0MB
-
MD5
373caf251e4d5114c08fed8879cbfbb0
-
SHA1
01fe295f7f691146521f3e8c4e2f23308f72f185
-
SHA256
2cea15f0e41f3b401bacb73374c5bdbea4e7e7dc9db67750bfe707b903c4c705
-
SHA512
acd40d1f71d792a311ea53e2150e2a66fa1aa8d4f1fab0f3d464d0dc0fe18a866b3556e2aeadd6ee50221a6c9a3074b4d233038790097173a3d78f58c45032f5
-
SSDEEP
24576:loMRP7eqUS+Nx2tFhNvW0tdcETHPE3symb/OcBXFknXCFZaw70PBDLtvMLpfEULf:DxrM6hYu/jYXCieEyo54xYZ8R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 373caf251e4d5114c08fed8879cbfbb0_JaffaCakes118
Files
-
373caf251e4d5114c08fed8879cbfbb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ