Static task
static1
Behavioral task
behavioral1
Sample
d9d380b183c84354c2108770bb1cc9ca_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d9d380b183c84354c2108770bb1cc9ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9d380b183c84354c2108770bb1cc9ca_JaffaCakes118
-
Size
528KB
-
MD5
d9d380b183c84354c2108770bb1cc9ca
-
SHA1
f30667ed1b81cf7e80c3cdab60e125fea99e7e50
-
SHA256
9add91525d1c4bd1f006834962408821dae251d0dbfd0e96e42a8d8af298e4c6
-
SHA512
3360ec1d2e76c90c8670aef018ac53e91229fc4ced79fce000bf7a4e4fc73c84716a1143fe52a351eff96e13a8f232769b3a2e5235b1445233fa90c8e4e4458f
-
SSDEEP
6144:RyH29Uyxnv9tCLTm1KNf4Y7Uf5za+h8R1rkGTWHwUHZUKVJN3Bgq9:aDIFtCLTm1KNAY7S5mjkQOUCJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9d380b183c84354c2108770bb1cc9ca_JaffaCakes118
Files
-
d9d380b183c84354c2108770bb1cc9ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 516KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ