Static task
static1
Behavioral task
behavioral1
Sample
a83acf46401a254fa4c571fcdc606458_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a83acf46401a254fa4c571fcdc606458_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a83acf46401a254fa4c571fcdc606458_JaffaCakes118
-
Size
1.7MB
-
MD5
a83acf46401a254fa4c571fcdc606458
-
SHA1
6d24fe6e79c7118922d80889fe8182c413639042
-
SHA256
17adfb6c866792d0dd22a0852c2d8190e24148f0678b7432a50ba03ebe4d0bff
-
SHA512
2d8cebc384d076db9b46d4fd762f58a22018646bf5fafb04ac57374ca3f9ba3556b1f781dfe80b0fdb50053872934342929192f088523e36d2fee1f7e06549d3
-
SSDEEP
24576:Tb1Xyoq4cvpuxFzywd2kQdd3j8Xua1f901:Tbf5FbC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a83acf46401a254fa4c571fcdc606458_JaffaCakes118
Files
-
a83acf46401a254fa4c571fcdc606458_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ