Static task
static1
Behavioral task
behavioral1
Sample
416a447f5bfcded4423bff5b8f5035e4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
416a447f5bfcded4423bff5b8f5035e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
416a447f5bfcded4423bff5b8f5035e4_JaffaCakes118
-
Size
205KB
-
MD5
416a447f5bfcded4423bff5b8f5035e4
-
SHA1
1a186acc2fc1107915dfa845220bf3d643c00279
-
SHA256
263ed010a6723709ec11a39e8668732940a8781ea0906d02e76dd4b9671a1438
-
SHA512
8c9b2382c4e2cfb2e7113db47e92198a29d177c93aadc53ef10a4d1bff951bc47f7c76b54f3b33ff0db023be080f4b35ac844f1224b6350c7b4f1090db1196f1
-
SSDEEP
3072:ABBIUcxZNrd25FjC9HvwNrQYVm2gMluTjl6nsGVEyhqC3dlt0+/rlzN:AgZBQZmvwNEO5l8j8T5qCtlawlz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416a447f5bfcded4423bff5b8f5035e4_JaffaCakes118
Files
-
416a447f5bfcded4423bff5b8f5035e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ