Static task
static1
Behavioral task
behavioral1
Sample
5ae48ab82599784bec09e3ebb23f979b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ae48ab82599784bec09e3ebb23f979b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ae48ab82599784bec09e3ebb23f979b_JaffaCakes118
-
Size
296KB
-
MD5
5ae48ab82599784bec09e3ebb23f979b
-
SHA1
a0a0ab4f6a51760194c4d8d6c2a959b7dcca3d8f
-
SHA256
2b63b8b0c94e9e98b06fd4ea65a57afc015aeb952e50af913f6b2677ea246dfd
-
SHA512
b2d12c8ca7c2a89158844344a065a5d67f04b5ceb7ba72792547d69f0da589866ef387a199a8a4a064bf201d4276e2e3b9dc19c2690e1c3060358ec5e519cd09
-
SSDEEP
6144:3I1xxVkdx0AuqeJ+IhhKHZNmSAPbB74EISjy:3IFmGVbAbmjB74Er
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ae48ab82599784bec09e3ebb23f979b_JaffaCakes118
Files
-
5ae48ab82599784bec09e3ebb23f979b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ