Static task
static1
Behavioral task
behavioral1
Sample
3c434075b87e4b88c4a19e2f4986ce5c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c434075b87e4b88c4a19e2f4986ce5c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c434075b87e4b88c4a19e2f4986ce5c_JaffaCakes118
-
Size
3.4MB
-
MD5
3c434075b87e4b88c4a19e2f4986ce5c
-
SHA1
4c870237ca3953ce23518e42332e90c31f9ec6af
-
SHA256
a031a582514de2cafaf37ee2275752768479970fd2c9fde86a6fed0254894202
-
SHA512
d474a27dc1d9b5eb52aaff8204ca8b376d51e898858a522b2d6663a0621c7a22fd1d243dcf22bb69ae56043c7c605bef504f1d4f38122e735e97868098a8b7b0
-
SSDEEP
49152:EHBJ1LsQ4yURH0OISZYi1p5LGiGuWYYNhr:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c434075b87e4b88c4a19e2f4986ce5c_JaffaCakes118
Files
-
3c434075b87e4b88c4a19e2f4986ce5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ