Static task
static1
Behavioral task
behavioral1
Sample
de4a9357f40015dc4b10bb7d63fe01e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de4a9357f40015dc4b10bb7d63fe01e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de4a9357f40015dc4b10bb7d63fe01e6_JaffaCakes118
-
Size
768KB
-
MD5
de4a9357f40015dc4b10bb7d63fe01e6
-
SHA1
b2621c97e29d8deca06f15aee49f2afcedca28d4
-
SHA256
f952c4fc2d11896ba9f8fe6391be57741f7b81eb63a315613061198508e9fe95
-
SHA512
5dfaf52d50d62288f742c5b42be491726f678785671e295c56802a660acb194e30a89447f944b696ae5433e281f7a8c7c642ff718fc1acda5705945a3b60b820
-
SSDEEP
12288:q4eFBqEsXwGMi8dE4QZxJg0FPeDAzQ8jpR7zkax6wMOcgVC2JNY10GnDX2+Ezwyh:SgECnPRhcgVNKW8x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4a9357f40015dc4b10bb7d63fe01e6_JaffaCakes118
Files
-
de4a9357f40015dc4b10bb7d63fe01e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 660KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ