Static task
static1
Behavioral task
behavioral1
Sample
3c7707746ff018369119c5489b30a875_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c7707746ff018369119c5489b30a875_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c7707746ff018369119c5489b30a875_JaffaCakes118
-
Size
622KB
-
MD5
3c7707746ff018369119c5489b30a875
-
SHA1
6536e3278e789de76b8f47d4c00884db28e86754
-
SHA256
a217f5548ae1ac1d83d7ca132c55c17148f764b72d6411d516757cdbde3c0d80
-
SHA512
a5af478d69a3dbee4ffe682b203f095b3e3ea0a124f46db0cafb2a7d10a290d98b143dbf34d8fc28fa97f2b72537fd2980a8a87b9b8f66fc0e6e545929b00c09
-
SSDEEP
12288:tro98FB2nxUIMnfpZUgvsMC004P5iMo2WYJT6YashlM0JT6YashlM:1nGxURgg8f4AMo2W09ashlV9ashl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c7707746ff018369119c5489b30a875_JaffaCakes118
Files
-
3c7707746ff018369119c5489b30a875_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ