Static task
static1
Behavioral task
behavioral1
Sample
d6f506af1cd3fa16003a062ac89ce10c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6f506af1cd3fa16003a062ac89ce10c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6f506af1cd3fa16003a062ac89ce10c_JaffaCakes118
-
Size
280KB
-
MD5
d6f506af1cd3fa16003a062ac89ce10c
-
SHA1
c4f89703b7fa3f1ba4c2d400b3038f34eee04ed1
-
SHA256
ed2fa58557e57035c788757edfdf040ddebf0720311468a724d7ba5ed23b4a53
-
SHA512
e0b1555f26684465c4b6a025225f8a821ffd90587ac10b3b74a8593d308295515f2592dd705d38751dd5183f92d0fcb0101ec13bfca78f493fcc44a5b8949e2d
-
SSDEEP
3072:s22I3TROFMDTasp9bzliFIJ/PWNePlzrN5BfulPxSW5cIUB0LHaymwDYDA5sDor3:sUNOmDBbzl+IJ/DPlzx5clP4KHZ4AnT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6f506af1cd3fa16003a062ac89ce10c_JaffaCakes118
Files
-
d6f506af1cd3fa16003a062ac89ce10c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ