Static task
static1
Behavioral task
behavioral1
Sample
6fe37b3afca3a4910eeb1d7cc3c71587_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6fe37b3afca3a4910eeb1d7cc3c71587_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6fe37b3afca3a4910eeb1d7cc3c71587_JaffaCakes118
-
Size
3.4MB
-
MD5
6fe37b3afca3a4910eeb1d7cc3c71587
-
SHA1
5b0d96af12e0933cfc2eb6dc28ca9fa21ef0c58b
-
SHA256
995445ee9f83d20cbd4b785cb2676d60ec356d5c17a94322eaefc585040fcb95
-
SHA512
0a43b2721d8af0d55686d81262b582a9de13448eb3f1e9b1142d00a995159320c440f2ed51a56e4f8b10b5a6f766ee42f32344a3d82bee4b48eae8dd26217560
-
SSDEEP
24576:ILv+5Z2LO2LMovAPqeAsuuR8mAEyk2suliDyaGpkk4eT61cLBESIrLVXq5My8yix:84ZqYuY8k2aDvGOPdo5MRFXP2kxAmBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe37b3afca3a4910eeb1d7cc3c71587_JaffaCakes118
Files
-
6fe37b3afca3a4910eeb1d7cc3c71587_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ