Static task
static1
Behavioral task
behavioral1
Sample
9ef3e496f6abd3058ee9f8ac16a8737b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ef3e496f6abd3058ee9f8ac16a8737b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9ef3e496f6abd3058ee9f8ac16a8737b_JaffaCakes118
-
Size
1.3MB
-
MD5
9ef3e496f6abd3058ee9f8ac16a8737b
-
SHA1
0810e81e32fd72175c82b2ae6f6ad00a9203384e
-
SHA256
ddcc8495437d4129f23da5ab8e1c2e71c541c0129ff9bcbe9187ee702a78f07d
-
SHA512
07dda4dd67bca7060cecfe7d148d82080b417ef102affebb3f6656db9a277d10c5911ad9028a0dc8c70c34c0d2b2ff15a3998622b60311d71c08f9aa5ef0880e
-
SSDEEP
12288:nOK6WOziUGmmSch+/DM8i7XiDHC5smqYxJkqDqYfzA0SFUj1SS5mzLhYJvFuMtMI:YZi7rr9NgIv8sUyj0W+Aff/1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ef3e496f6abd3058ee9f8ac16a8737b_JaffaCakes118
Files
-
9ef3e496f6abd3058ee9f8ac16a8737b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ