Static task
static1
Behavioral task
behavioral1
Sample
5fe832f8ff6a89c68700ed50b7fd1837_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fe832f8ff6a89c68700ed50b7fd1837_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fe832f8ff6a89c68700ed50b7fd1837_JaffaCakes118
-
Size
29KB
-
MD5
5fe832f8ff6a89c68700ed50b7fd1837
-
SHA1
5fb66c00a997eb631486fd8c5d724e4a37dd3424
-
SHA256
86a440e04a560bc7b57ad07121a7a53ca23c5cbf019f67c0d297b3618e2dce32
-
SHA512
f646b6634ae51193e5b7d882cf2abb5704bcab18ed118ac1c253fa9415c0a686bb94739661137ce1e47aeb48f5a0d6325912d48c0f276f2b3dbf67f1e516bd25
-
SSDEEP
384:bHpHnXxuSOXrqoHK/fHHVJ5U3VdICm8FqXcfLc5IxmyOUOszpasZCzdobwJTIXWq:bJEzrqVvHH5tCml6EULwJJTu7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fe832f8ff6a89c68700ed50b7fd1837_JaffaCakes118
Files
-
5fe832f8ff6a89c68700ed50b7fd1837_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ