Static task
static1
Behavioral task
behavioral1
Sample
8210d48d75c82c57116cf89ea3fcf0c0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8210d48d75c82c57116cf89ea3fcf0c0_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8210d48d75c82c57116cf89ea3fcf0c0_JaffaCakes118
-
Size
123KB
-
MD5
8210d48d75c82c57116cf89ea3fcf0c0
-
SHA1
272ab74ced1ab435e502d2fd531db843315a2684
-
SHA256
de5326af00d51e5abe4eaf92f6dcdf92dec93662ba874f3fd14181b5829bf1c5
-
SHA512
5c33eaf9d481f43d5a76545d9d9a9b0bb499cbdbbc502e5472da6391b6b26f9493b38490e003b3600fbad76c26fd9b6073f6177f3773e5db8c51a1c45dcf9aa6
-
SSDEEP
3072:13UlBujWTyH+oHrNDf9G92O+IGUXZelVTk1JIIIIIIIIIIIIIIIIm:9njy8+o1wUO+I1yNk1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8210d48d75c82c57116cf89ea3fcf0c0_JaffaCakes118
Files
-
8210d48d75c82c57116cf89ea3fcf0c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ