Static task
static1
Behavioral task
behavioral1
Sample
68cc2e7e26914434c0c6c3a0b8f7fc65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68cc2e7e26914434c0c6c3a0b8f7fc65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68cc2e7e26914434c0c6c3a0b8f7fc65_JaffaCakes118
-
Size
60KB
-
MD5
68cc2e7e26914434c0c6c3a0b8f7fc65
-
SHA1
ffa30bd2f9b44a7679214ed3cd2c9447e689c946
-
SHA256
31b788d62901d867859081b23c74f4d5f98c47415a445321ac038fd8a597462f
-
SHA512
cff73dd6fdbaaacfc90a5613ead1af6980c91ed9f7259b22e1f34ae9c460f65070a2f0f56c43af050e066eb278cbf8b8719f89d4e7423199a980e4d98e41e785
-
SSDEEP
768:baIkj2qkhUZZZ3DIIz7/l5eE1rhWxXDGzD313O1T9S58oWQ5ShUcs7EthQMkBRAv:mj2qkSZZZ37zrCCrhy0313QwL2hQVqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68cc2e7e26914434c0c6c3a0b8f7fc65_JaffaCakes118
Files
-
68cc2e7e26914434c0c6c3a0b8f7fc65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ