Static task
static1
Behavioral task
behavioral1
Sample
a5d50b3c2dfe6dc4a3f9245146223590_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5d50b3c2dfe6dc4a3f9245146223590_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5d50b3c2dfe6dc4a3f9245146223590_JaffaCakes118
-
Size
106KB
-
MD5
a5d50b3c2dfe6dc4a3f9245146223590
-
SHA1
7fbce4b6e67682ed1d22d1876fb21eb6badc428d
-
SHA256
fb82251f919b163a6c131286e00b3352f42574b82f919c1be9de0c0a716697a1
-
SHA512
19d14ea4e8778df04c97ddf31a9c7ac87954dff798374db602298065cdea3a6c5e7d4915dc02b6766b6aa8a9f6b4fb5602f3670515b17b40c2c2696841fddb85
-
SSDEEP
3072:jZsC/QPIJCiLIeW+tYUYUUYYSUYUYUYXR:lMi5L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d50b3c2dfe6dc4a3f9245146223590_JaffaCakes118
Files
-
a5d50b3c2dfe6dc4a3f9245146223590_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ