Static task
static1
Behavioral task
behavioral1
Sample
5be97549ebe767daf198b9d68bd12b63_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5be97549ebe767daf198b9d68bd12b63_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5be97549ebe767daf198b9d68bd12b63_JaffaCakes118
-
Size
1.1MB
-
MD5
5be97549ebe767daf198b9d68bd12b63
-
SHA1
0ad82a368166d98fa91db0a08d33c2956f480752
-
SHA256
b33b4a16efe5762e27e1f22bfa26654a542e92454e2c5e2a8d57521e179c42ac
-
SHA512
8b5b46c45eee4630a56559335f9600d9238a2334ce4a7c624a0706256bdd683dfb7fca5f79f359c83817731ac336db807a22baa3a87a6c5da003c03ce3f41b89
-
SSDEEP
12288:T02fpEKO6PyTx/xkfM0C6gTk1gy/dMeqclfq/mM/gnj1mvcAXHDbmGAb/5Cb21IE:Tq+P+qPC6ayVRfg/gRmsbLThpi5jI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be97549ebe767daf198b9d68bd12b63_JaffaCakes118
Files
-
5be97549ebe767daf198b9d68bd12b63_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ