Static task
static1
Behavioral task
behavioral1
Sample
895082cffdd9667d3616e6792be0f83d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
895082cffdd9667d3616e6792be0f83d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
895082cffdd9667d3616e6792be0f83d_JaffaCakes118
-
Size
520KB
-
MD5
895082cffdd9667d3616e6792be0f83d
-
SHA1
5b6847e3f6eb7261bbdc46e1946b7c5222e54a9c
-
SHA256
785796353000f9fcf9f15998242ed922823607c3e479d86b640f02b8a000761b
-
SHA512
dc6d47c485b1c1832cea8947e6f95cda7d33bd70a8b6c77b210f51f858863d1a79c54320f5ad20645ab356c40376d86d47ba59b6a1b0a506268e2de0bf55f753
-
SSDEEP
6144:XW9yDoAAJxfSQsv54MjuKnl/OjFIoWDal/7wx1hvJ0xdRfToMxN6GG:6pU966pnlOSoUvqxdpUMxNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895082cffdd9667d3616e6792be0f83d_JaffaCakes118
Files
-
895082cffdd9667d3616e6792be0f83d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 508KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ