Static task
static1
Behavioral task
behavioral1
Sample
d13859423e2c9591180f6b0afc808070_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d13859423e2c9591180f6b0afc808070_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d13859423e2c9591180f6b0afc808070_JaffaCakes118
-
Size
139KB
-
MD5
d13859423e2c9591180f6b0afc808070
-
SHA1
5ccb07eae88e12d1076a547de7c3591c5266e8c6
-
SHA256
2e5ecda3f78e28dc5a821ce62e45578143e1844b8e02470e4ef54b52ecabd207
-
SHA512
7854a78e25e33909bf9c0450b76f99a491c9ba71078bd4b1a36c39f7c10530e33556e9bb5d66fa51c68fe5006af346cf1590fec377bd35ea262240fa5b18f613
-
SSDEEP
1536:GKg3aSIp7VxSGiGsNZiMk+vQ4LvtUzsyvOA8jDulRihb1xvMxBGO5Y5Kumbqbf06:Gb3appRxSQl+t+Mu4G/q7hQgjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d13859423e2c9591180f6b0afc808070_JaffaCakes118
Files
-
d13859423e2c9591180f6b0afc808070_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ