Static task
static1
Behavioral task
behavioral1
Sample
64197264227ddec0eea67d271d86c7b5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64197264227ddec0eea67d271d86c7b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64197264227ddec0eea67d271d86c7b5_JaffaCakes118
-
Size
56KB
-
MD5
64197264227ddec0eea67d271d86c7b5
-
SHA1
a1ac4999c79f6c3606f95e92e1259f3fcd38d3c1
-
SHA256
5965eb4073e43b6fcd7fca56cf93bdda2f7ab5584accf1d1a158430a03d72de2
-
SHA512
a64f2f4ea25c132f5874b476fe93fd1ca955a36ffc8f37069cb375eae68afda86e8dc2f16d9e0d8abca9744acc33e87a0f49efbcec004fa19ec077349aaafd7f
-
SSDEEP
768:ZGjjjWN3ELvg/v4gxVJdNNpsfOWb1C/mHt6IcfK6V8jBIXH:ZGfjWN344LZNYfOw6kn2K6VzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64197264227ddec0eea67d271d86c7b5_JaffaCakes118
Files
-
64197264227ddec0eea67d271d86c7b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ