Static task
static1
Behavioral task
behavioral1
Sample
4da36d0c1233bc2b9d43bc6a6d9c5d71_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4da36d0c1233bc2b9d43bc6a6d9c5d71_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4da36d0c1233bc2b9d43bc6a6d9c5d71_JaffaCakes118
-
Size
64KB
-
MD5
4da36d0c1233bc2b9d43bc6a6d9c5d71
-
SHA1
ffe558cf0cef16871d6b8f3f379e8cac416343bc
-
SHA256
1970ceaf18df3d60814540693ae0a63020b63d016da65559f0b9c6b7fb40564b
-
SHA512
9c67d1471fbd3b78b28e215710f4e955a688b48d1980a438fef019e07a7ac902b9f1c8fbc58c205ffbab3ade2d77d78d0f53a5dc3ae6cc24f9fab9df3c13f5de
-
SSDEEP
768:NVKzmL+5AHiQisD9zAoOLaFkLLHrPcZYBl9e/E1TixMkzyqhRK:ai4ex9OcwLH4eR3T8yqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da36d0c1233bc2b9d43bc6a6d9c5d71_JaffaCakes118
Files
-
4da36d0c1233bc2b9d43bc6a6d9c5d71_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ