Static task
static1
Behavioral task
behavioral1
Sample
cfa9675afad996d7e4d3ba07ec2f14e1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfa9675afad996d7e4d3ba07ec2f14e1_JaffaCakes118
-
Size
1.8MB
-
MD5
cfa9675afad996d7e4d3ba07ec2f14e1
-
SHA1
81c4a6000dab41991b1a5da824b4d0288418fc15
-
SHA256
27fe088254ff2e5b532ef3f9a8bd776876d0277ed51e360d8b2d5b4c90aadb8b
-
SHA512
f29406d8bae5931eb3510bfb238aa2c8ef37e0437d4af4abe10fc8e3297589a1ba031cf5368c4d6616252928c27cf375a78109c4a6de27072b044d1cefa37a17
-
SSDEEP
24576:b4RUiCsb7z0z2QClZzIasgB9g1W7+3EaozrHL3+wcdOSTy:ac2QoZ8L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfa9675afad996d7e4d3ba07ec2f14e1_JaffaCakes118
Files
-
cfa9675afad996d7e4d3ba07ec2f14e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ