Static task
static1
Behavioral task
behavioral1
Sample
cff29ddde1b60adbd10d58832c2f1109_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cff29ddde1b60adbd10d58832c2f1109_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cff29ddde1b60adbd10d58832c2f1109_JaffaCakes118
-
Size
492KB
-
MD5
cff29ddde1b60adbd10d58832c2f1109
-
SHA1
1a5bd07bfe325d380aefa08155566a2b9dece08a
-
SHA256
ca4633ab8c2140aa8d01969965ca59a470843bf23364473a1e98ea20837edda5
-
SHA512
915e8e5d7d7381296fd9d50d24a9f12fd330edef052f2a03ce874cf5f00bdcfcc906479f19ff8903d024e342fb6aaa4131daf072421b3fc2d8b1dfe14bc67e62
-
SSDEEP
6144:DPJ075nizHJ+72b0psyMRFauEyZToz4F43LxxQ:KeHYSbtFD1GL8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cff29ddde1b60adbd10d58832c2f1109_JaffaCakes118
Files
-
cff29ddde1b60adbd10d58832c2f1109_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ