Static task
static1
Behavioral task
behavioral1
Sample
8e6d595cb34a50e27a6eb0bd2d3d7e3c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e6d595cb34a50e27a6eb0bd2d3d7e3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e6d595cb34a50e27a6eb0bd2d3d7e3c_JaffaCakes118
-
Size
253KB
-
MD5
8e6d595cb34a50e27a6eb0bd2d3d7e3c
-
SHA1
b740b795aab4b9b82f148ed5952c9f232ec2309b
-
SHA256
4f251084a1893d782726cb12a96b917a3ebacb7bf3a52098ef3b30a3c622fc58
-
SHA512
7921a12e225b0356a652352727fe5f79bfc7571fda3d0af3f79335fb189881b810969a49a9fcdfc6c2f7b700884ede65cd856c9b3a73daf92304a145177a6406
-
SSDEEP
3072:rNk50Q9tyjNWqQ1CWwOJVHt5pP+SQ5cArZdKC/kJ/MsnYllCD/KN3S8TKe:1Q7VZG5aeuJ/pYl4D4pK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e6d595cb34a50e27a6eb0bd2d3d7e3c_JaffaCakes118
Files
-
8e6d595cb34a50e27a6eb0bd2d3d7e3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 251KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ