Static task
static1
Behavioral task
behavioral1
Sample
c912d85b08b3fb7e6c259e8ac6bd2863_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c912d85b08b3fb7e6c259e8ac6bd2863_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c912d85b08b3fb7e6c259e8ac6bd2863_JaffaCakes118
-
Size
432KB
-
MD5
c912d85b08b3fb7e6c259e8ac6bd2863
-
SHA1
a1a22cf8c6438c1b28dcf44915f12001ea2fd8d3
-
SHA256
1aa4035ddce9da102af0bc8d6073d0e88cb2f2b770f1cb6cf84e799597c13732
-
SHA512
170851e4cbf5f5c072c6127b3de6e450392c3847cc81ae95ba4c02f1925d5d45762b7213a7191d5d32f25af11a412a13782512c17da57e8e13debec0f68d2418
-
SSDEEP
6144:N5g97rOBA2xg4xQxCGgtoDXf7rpqDoCJkE6AZcb969s/UOjWo:Tg97raDxRUC5t8Pk/DLs/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c912d85b08b3fb7e6c259e8ac6bd2863_JaffaCakes118
Files
-
c912d85b08b3fb7e6c259e8ac6bd2863_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ