Static task
static1
Behavioral task
behavioral1
Sample
439d3d3e329bd1d28145a04b38de58e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
439d3d3e329bd1d28145a04b38de58e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
439d3d3e329bd1d28145a04b38de58e5_JaffaCakes118
-
Size
840KB
-
MD5
439d3d3e329bd1d28145a04b38de58e5
-
SHA1
c3e3cd667deff5d2b1bab782804ec33d275782ed
-
SHA256
d96f41e1cbc63e78c02ee5e7047f0c587e9d0deb7924bbdae17ecd8c85c3d6bf
-
SHA512
79f5a63ba53bfa794c9afec455bbb6fe7501a8d8d9f5a5ecc6f86882b5d6d40ee317461dc6808a38d7cd7a4401f6ec70a61cf46c1128bf9773da507246be4cdc
-
SSDEEP
24576:XZRlzK96yLMBjbgDdpN3TcE9dgEEguRWzU1lyUUHLJiTkPFl6rKyUNb:MJIgDdpN3TcCT18fU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439d3d3e329bd1d28145a04b38de58e5_JaffaCakes118
Files
-
439d3d3e329bd1d28145a04b38de58e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ