Static task
static1
Behavioral task
behavioral1
Sample
d1408b6ae702f3d4a4827765275f2a6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1408b6ae702f3d4a4827765275f2a6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1408b6ae702f3d4a4827765275f2a6e_JaffaCakes118
-
Size
128KB
-
MD5
d1408b6ae702f3d4a4827765275f2a6e
-
SHA1
07f01a6a4cd399ed0e2d1e6dc325799d16ece18a
-
SHA256
16a630a93bae3e0d4706966d5f5daba17e37c7b033584b6bd2dc14dc0e8a552e
-
SHA512
6c61d0509527399a6c1155b0f32f0730735ac7d409231a2cf0240fa7f23762c00788f7847a6b6ab15479cf5621b31a4b096277f3ea4e880912d467c034423891
-
SSDEEP
1536:l6bYBcwagS8g/oUgGo7UdAzP4rKiCYRtiZW1VhSjdiVM2cDlzVk/ONFLm3i/JPF/:l6bzgSdoUgB7UcLiD1V+DlVtdF3VZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1408b6ae702f3d4a4827765275f2a6e_JaffaCakes118
Files
-
d1408b6ae702f3d4a4827765275f2a6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ