Static task
static1
Behavioral task
behavioral1
Sample
8b12ea65ac3148e31459f0f5514d78f1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b12ea65ac3148e31459f0f5514d78f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b12ea65ac3148e31459f0f5514d78f1_JaffaCakes118
-
Size
2.6MB
-
MD5
8b12ea65ac3148e31459f0f5514d78f1
-
SHA1
c548be0dc9ae1b6e4df0eeed02e7a81e1f052dfa
-
SHA256
4cb2ffd85592871618629de1b5d33a04239ed8a9f6b6956632e5900ed6cd3508
-
SHA512
8af07bb5830e71fab336ee8a660e045543236841cd6bc093d2e6848350e67818026ca15b9acbbba0b09801d3107c931f48c68903701d1463d024a9b2e65f859e
-
SSDEEP
24576:JDYLn297w/78HCRxPIsNyYHJ4d5oraj4AOFR3qbn0NFcJYBSWbK6MVBAqiVgVgXi:U4OpIKHJc5Kagqb0uY0CLMYbhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b12ea65ac3148e31459f0f5514d78f1_JaffaCakes118
Files
-
8b12ea65ac3148e31459f0f5514d78f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ