Static task
static1
Behavioral task
behavioral1
Sample
434ab3ed3650227918c573990bfcd6e5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
434ab3ed3650227918c573990bfcd6e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
434ab3ed3650227918c573990bfcd6e5_JaffaCakes118
-
Size
137KB
-
MD5
434ab3ed3650227918c573990bfcd6e5
-
SHA1
7421018e1a8cd5a54fe5dbb53c18bdec39a12c0c
-
SHA256
49f282cc53187bb59824a1dd9b4a0e37e035716ed24f84522f0aec4866d28a0e
-
SHA512
9539dd3ac1482f34eaa81e9d01df3ebfc8ed7ae8e148a3fa2afe1734724e15025bb7ce313079a6c86d158c32fe95a0a5d840519737f3130e7d2a6429f2a99a84
-
SSDEEP
3072:RAu8mt2HG0oWukt30moymTLNkiyVvZlIdhoZ0bVG2al:Rp8mMHG0qkt3HCxyxZ+oZ0Js
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434ab3ed3650227918c573990bfcd6e5_JaffaCakes118
Files
-
434ab3ed3650227918c573990bfcd6e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ