Static task
static1
Behavioral task
behavioral1
Sample
6670142e16be10188102bbed5500fb50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6670142e16be10188102bbed5500fb50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6670142e16be10188102bbed5500fb50_JaffaCakes118
-
Size
916KB
-
MD5
6670142e16be10188102bbed5500fb50
-
SHA1
d6a48f2cc45d10a0037fa3bcc70d7c6e06747c39
-
SHA256
288a8ac50a4a4410ab8c8dd153489384971b51c0c03a6486573b01bc8d0aadb3
-
SHA512
28d80813968f18099063d7281ea804c0c8c76ab5c2e0c9159e9f7f3c3f35fc4057ab5433962079d5fd4c89c866eb0401a851df5c937a00e07b3fe63a3d818947
-
SSDEEP
12288:+PYysXUvIL19d6QwYCcLPDn0pWckG7xp0Nt+q3NKaMrI51Zmk8AGnRj6cdy:+gHWILPdJCMLoW8zum2yRWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6670142e16be10188102bbed5500fb50_JaffaCakes118
Files
-
6670142e16be10188102bbed5500fb50_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 636KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ