Static task
static1
Behavioral task
behavioral1
Sample
4036264bd4c372bfbe692969d73f1745_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4036264bd4c372bfbe692969d73f1745_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4036264bd4c372bfbe692969d73f1745_JaffaCakes118
-
Size
325KB
-
MD5
4036264bd4c372bfbe692969d73f1745
-
SHA1
ce995ee3b89c99ea5203acf3e0b2c6d7466389c6
-
SHA256
b96dc9691d5d475e9ef13bc0d51e1987bd4f99eec572a7f53118899ae6bcf130
-
SHA512
5ced6ec7e1c7107f76f88a21b6aef4863cac9ec055cb3edeef280c46de9bc72505e1ab8ccb4ebe6c10d8f51ced63ca08b0a6570c6f9f12c0b51626163a307906
-
SSDEEP
6144:0v+9xCAQa4TW3rrCwEYtpun3TMJhf7G6OrUWybH4kl5IASZNTbl:Y+9EaOCrrgYta32Z7GNUWybYkLK/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4036264bd4c372bfbe692969d73f1745_JaffaCakes118
Files
-
4036264bd4c372bfbe692969d73f1745_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ