Static task
static1
Behavioral task
behavioral1
Sample
952514bd0feca3b264f7ea953b0c8f15_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
952514bd0feca3b264f7ea953b0c8f15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
952514bd0feca3b264f7ea953b0c8f15_JaffaCakes118
-
Size
160KB
-
MD5
952514bd0feca3b264f7ea953b0c8f15
-
SHA1
3fb28d7cb197f3178e5c35ee6450db262d4e8e85
-
SHA256
2b5ab34163a44f89c8bbf90ee227e596d10f3c71208da19cc453daec85000cdf
-
SHA512
68befdb488b918ff040eae74dc797e4e6700111d281680de8ae3e103239602f5db6477c7f6003c7ab00fad5343d914f2c07ed08f7152472b654bcb00ce0f3d15
-
SSDEEP
3072:8sDV6Az1lWgFvYGnJd6KpZV3uON9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd6KpZV3uON9WU/G9h2w591
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952514bd0feca3b264f7ea953b0c8f15_JaffaCakes118
Files
-
952514bd0feca3b264f7ea953b0c8f15_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.teht Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ