Static task
static1
Behavioral task
behavioral1
Sample
be6442f001a479976d7e41b21f431afc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be6442f001a479976d7e41b21f431afc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be6442f001a479976d7e41b21f431afc_JaffaCakes118
-
Size
570KB
-
MD5
be6442f001a479976d7e41b21f431afc
-
SHA1
3d24dd1827f1336e232a6611b949f4fde0156c48
-
SHA256
8bd59e4457c52650efa84e70b0af4439b3c34c261c5a9f1450b14703b9235305
-
SHA512
60b4978ddbe7fc6bd75e2df2e631a30e8827261709fc0b1b79da846f61d56dbba63c9662238dbf71831a4c8e1f73d4b30f6136767dc27bd0951c3a050dbd9ced
-
SSDEEP
6144:ueoFC6fblyE9x5mqyOZWXnFuUMsu93N6L6axfMxrHRbBWUZPKScoTyYi:uNM6f1MOZ6Fu7J0mH18UF7yYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be6442f001a479976d7e41b21f431afc_JaffaCakes118
Files
-
be6442f001a479976d7e41b21f431afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ