Static task
static1
Behavioral task
behavioral1
Sample
cf938691968e668882fd963747b4cf3d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cf938691968e668882fd963747b4cf3d_JaffaCakes118
-
Size
936KB
-
MD5
cf938691968e668882fd963747b4cf3d
-
SHA1
02b7b7bd55360066aad27af115287c5db3695361
-
SHA256
1ba94cde09650525834398c096f86b84718445f7e790ce4eed65476ed5ef6cee
-
SHA512
331a03c0c839f842089eeb5dfac05108178e2ddd6247d6742688ec13af483d00127670f32e47fcd4eea58b5c8f0c0bfbe45805c7e0bec263be093fc1032f31aa
-
SSDEEP
12288:/XbrD0pz+Qak6mmUCjV3t5F6pQbgj5RFGItmxzOboEDLPoUQcaEy5UKtahteIKwP:/wpvmQQlxzmbBMjmhFsYlw/AQ0s0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf938691968e668882fd963747b4cf3d_JaffaCakes118
Files
-
cf938691968e668882fd963747b4cf3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 904KB - Virtual size: 901KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ