Static task
static1
Behavioral task
behavioral1
Sample
a768546a53121478d2b633758ad0a762_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a768546a53121478d2b633758ad0a762_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a768546a53121478d2b633758ad0a762_JaffaCakes118
-
Size
806KB
-
MD5
a768546a53121478d2b633758ad0a762
-
SHA1
8ddf7b31108d3e9089136583e6d6777a494688aa
-
SHA256
cb554ff729a2e33d8ecc4ec2a6dbce1b35052760d87412682e1b5e678b569225
-
SHA512
1b9ac4020c48340535ea7d6ae1f2f8c9956b61f92e7b4e0bc929068efb91bed78e1843e050884b399f801c96ffb7c0588c19722bb6015a04ac7554fbb046debe
-
SSDEEP
12288:/Tv2zv1g09HIdQ8UjzaxMbLYQmBLagQJw5BYpFRU1Ad8FV+kPTgXlvM19tt0:S2Kn5wJRBLals+pmAd4+kLg1Uztt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a768546a53121478d2b633758ad0a762_JaffaCakes118
Files
-
a768546a53121478d2b633758ad0a762_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 801KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ