Static task
static1
Behavioral task
behavioral1
Sample
64d75c85be6aa39dc36e28bd51457e65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64d75c85be6aa39dc36e28bd51457e65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64d75c85be6aa39dc36e28bd51457e65_JaffaCakes118
-
Size
334KB
-
MD5
64d75c85be6aa39dc36e28bd51457e65
-
SHA1
797eeb4b9469b5a3d872e7ac007341311e81c253
-
SHA256
c4ffc5d4ff2b13e0e32b1373179a082ff33e540ed4221826cc3a48f34afe4686
-
SHA512
750d9cd79e41262f9f2c8924f996f6d0d95667af630027ef6bc647927e84066e39fdaec6025be9e412b361ac494344d06fdab3b64ef99b98701f804176b87a4c
-
SSDEEP
3072:GkoP1Lows3k9mJq9v8LxnY0zYxzsdd9aaAqC/X+nTAscNFHC/X+GC/X+ptZYc2AB:4Lo/k1vUsWaayscDooc20Y+elm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d75c85be6aa39dc36e28bd51457e65_JaffaCakes118
Files
-
64d75c85be6aa39dc36e28bd51457e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ