Static task
static1
Behavioral task
behavioral1
Sample
65394e9e077f3b5be8dab860089eeedb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65394e9e077f3b5be8dab860089eeedb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65394e9e077f3b5be8dab860089eeedb_JaffaCakes118
-
Size
528KB
-
MD5
65394e9e077f3b5be8dab860089eeedb
-
SHA1
1d7ee20dbc25127bff4a766bf4526fbfdab8cb3d
-
SHA256
7fb5211d0dd97a0f6e0ff70e80cf89fe568b63d306f91f06d258ff87053c9eec
-
SHA512
72019ca4b7b0138b23a7cb4fc52896246f4f53002992feedfa17c3fb3df9047335d02e2455aa8533410e22f8a0cbd01c0d88ee107e21fc1c9d01cdd9f22b578d
-
SSDEEP
6144:7TSeRSX0W9Q7JHsRam/Aw8uoxKfLko17bJAbkgatvlApZ:9ad67JMRam/Aw8ubgo1aYgatvKv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65394e9e077f3b5be8dab860089eeedb_JaffaCakes118
Files
-
65394e9e077f3b5be8dab860089eeedb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mscoree
_CorExeMain
Sections
0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE