Static task
static1
Behavioral task
behavioral1
Sample
b3d8c1bfd2a6eb14db84eb4e88be99da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3d8c1bfd2a6eb14db84eb4e88be99da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3d8c1bfd2a6eb14db84eb4e88be99da_JaffaCakes118
-
Size
614KB
-
MD5
b3d8c1bfd2a6eb14db84eb4e88be99da
-
SHA1
79a18d1b71c42504e8f59ec08f7b20971b2eaf12
-
SHA256
90f685596a5055af02a893d6874d2a79f3a9a0329be04c362052c88658a2edb5
-
SHA512
04b1fe74aa273035000b631a80bfc7602c09b4cd4557a342ccf33762754154a8a8b4f28fcfb5fe0fae4be8236fc070a7de7eec85739b3f1f46e74b8a0e2fdd5b
-
SSDEEP
12288:ZfoVljQMCAdtoX/CQjM1lnNLwoZfZa3190+ANJp932JT6YashlM0JT6YashlM:9sNCAdOX/rM1lnNlo190nd3S9ashlV9H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3d8c1bfd2a6eb14db84eb4e88be99da_JaffaCakes118
Files
-
b3d8c1bfd2a6eb14db84eb4e88be99da_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 611KB - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ