Static task
static1
Behavioral task
behavioral1
Sample
b6cb9a36cbe1419403392c32bd5c60ba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6cb9a36cbe1419403392c32bd5c60ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6cb9a36cbe1419403392c32bd5c60ba_JaffaCakes118
-
Size
845KB
-
MD5
b6cb9a36cbe1419403392c32bd5c60ba
-
SHA1
64071d1637485a9d591f13a97fd051c3881fd94c
-
SHA256
98cc8ed1f382e032eaad36d1748683b8d0c3f9a64d8d91299bab0d3bf7b85682
-
SHA512
e8936821c88475d76d01a818949d303dafd816b1866179c5435cf723ad927c696858c1eb7b3ab0abb3c09e62c35d69ce091ebcccd79b8fbad1e6a51bef7b2b56
-
SSDEEP
12288:fUmnfl8ieY69X9tGTne3SrLZLnpYB8o3vS94JvKrlPwAAdLHemRre7Gp9R/5uLJr:NI9NsVgucE2embC2ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6cb9a36cbe1419403392c32bd5c60ba_JaffaCakes118
Files
-
b6cb9a36cbe1419403392c32bd5c60ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 841KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ