Static task
static1
Behavioral task
behavioral1
Sample
66a016d12781d29889d0324cce11a299_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66a016d12781d29889d0324cce11a299_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66a016d12781d29889d0324cce11a299_JaffaCakes118
-
Size
760KB
-
MD5
66a016d12781d29889d0324cce11a299
-
SHA1
145fbc12197fc5f3f3a4b0efdf3e2d36b1d25fee
-
SHA256
bf0b7d01fb7c62289a556bcaf0896fc798e6a8a36648bd10e6c584944a686707
-
SHA512
5500e9989dbcf4d338eb7f789b0050106325e998e28cb24b1895b410e110ca456ed57a8408d1afa04003dd74f7be421f233dbed649d10cf8c5e6fa34e8e55131
-
SSDEEP
12288:pWDo4a3BEjDzPeLDKYiiXbW1niY/cw+7U617W1vETyjQyLbf6jZD/AteaGscYlv4:4Jea8+jsltf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a016d12781d29889d0324cce11a299_JaffaCakes118
Files
-
66a016d12781d29889d0324cce11a299_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 748KB - Virtual size: 746KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ