Static task
static1
Behavioral task
behavioral1
Sample
d544b78d311c1b9b6dbf9c48adec587d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d544b78d311c1b9b6dbf9c48adec587d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d544b78d311c1b9b6dbf9c48adec587d_JaffaCakes118
-
Size
148KB
-
MD5
d544b78d311c1b9b6dbf9c48adec587d
-
SHA1
663d72377be2a313fe6eaf225ce35b32fff2d615
-
SHA256
0f4e4bc0cd0f467b20400ccfc9cb69b401af8ceb8005543526c677e08511b281
-
SHA512
c0be50439424a88e3c10b71a794c7971f4a2e8cac720f0ec444fd3f43aabe4fccd6ae795e6df588c648c1e2a74df73f2b88569572664611d2ec934631e32c771
-
SSDEEP
3072:YA+TTxtZYcAl2E3N1PswWXONEU2l/vTW:YAdzN1PsAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d544b78d311c1b9b6dbf9c48adec587d_JaffaCakes118
Files
-
d544b78d311c1b9b6dbf9c48adec587d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ