Static task
static1
Behavioral task
behavioral1
Sample
d593a7d0b4cd148b18b3a7d2c7f4f919_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d593a7d0b4cd148b18b3a7d2c7f4f919_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d593a7d0b4cd148b18b3a7d2c7f4f919_JaffaCakes118
-
Size
1.1MB
-
MD5
d593a7d0b4cd148b18b3a7d2c7f4f919
-
SHA1
9b4ad7c947fa4dd1f66226e75ae4e5098bc6f95a
-
SHA256
8d483e125aed9780053e233b223b345e2497f956076ec6059adb0fd22cd02659
-
SHA512
e08f6052e1fed375814f58b7e10a956eda7e1bb217df75f600e1b42820303df48d0a8cfbce298da4b4bd05523384b7442515b72ab1730dad49ce8a57119397b5
-
SSDEEP
12288:pzjRBhpabq3hHOT52okzgEhmzCMRFbo59JgXAOAgRZE/cXVZmV6KmwHna2JdMyCp:WFNeOdIFxUfNFJi1S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d593a7d0b4cd148b18b3a7d2c7f4f919_JaffaCakes118
Files
-
d593a7d0b4cd148b18b3a7d2c7f4f919_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ