Static task
static1
Behavioral task
behavioral1
Sample
aed7a646369d488cd4e5ffc7ba8dc02d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aed7a646369d488cd4e5ffc7ba8dc02d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aed7a646369d488cd4e5ffc7ba8dc02d_JaffaCakes118
-
Size
215KB
-
MD5
aed7a646369d488cd4e5ffc7ba8dc02d
-
SHA1
b1ab2917e83dd9e062aaa6d016a93989b51e7457
-
SHA256
1beabe68736f0e1276945c9668155ca1b599d862710f988ad4b68f651ac5df2b
-
SHA512
fd8fef30665eb0ad34473fca361fb44781384e6d7e183175510b1db5f936d95b882f2c244940acd2c64eebfa9cf8e4d1ee1020b33bb38c87c90e35f1a6a457c2
-
SSDEEP
6144:VtDRoE4mT/b74t6AJIYRMIMuvL1OE4wrl:VtDi8TjMt6AiY/MuvLTx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed7a646369d488cd4e5ffc7ba8dc02d_JaffaCakes118
Files
-
aed7a646369d488cd4e5ffc7ba8dc02d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ