Static task
static1
Behavioral task
behavioral1
Sample
b56d9c9944095b25a394d0c5135f0e41_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b56d9c9944095b25a394d0c5135f0e41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b56d9c9944095b25a394d0c5135f0e41_JaffaCakes118
-
Size
388KB
-
MD5
b56d9c9944095b25a394d0c5135f0e41
-
SHA1
5fbe4df2b6b8e71f11ba9861ea97b31f3056f0fc
-
SHA256
34e9a62c9cb690f60fd57a4b13262d0616b158a21a554917468e96a1ec3b63f5
-
SHA512
e251118f01759735d0825697a15de4744fbb908a9fbcb7463ccae93e44c278359041b4c2888eab0039d8c809f0b26305881519c9e1d4a6ef9aefc1727cb5f5e2
-
SSDEEP
6144:81js3dSw0sJGFvtlPuGju19W2ElxgSAGAnaKC+/9LgLUhKlp3pOTdUHnc:vIw0scRi7196lcnaiFLgCKROT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56d9c9944095b25a394d0c5135f0e41_JaffaCakes118
Files
-
b56d9c9944095b25a394d0c5135f0e41_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 376KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ