Static task
static1
Behavioral task
behavioral1
Sample
de5c7256cf831c95ee202b87153c3a34_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de5c7256cf831c95ee202b87153c3a34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de5c7256cf831c95ee202b87153c3a34_JaffaCakes118
-
Size
365KB
-
MD5
de5c7256cf831c95ee202b87153c3a34
-
SHA1
b68bab7f82f66d9564e4546c805f8a007ed6c288
-
SHA256
4a9c5492af95f8dd08bc6445377666b4424dd2c50eb20643654b22f2ca6d5d3d
-
SHA512
8d5eb39682f9743ce92e708315c36837bbef0060c19cdb6cd380ee19040cd95152be2cdc03be28929737dd23902f47204f7813896ecf9fb311d3988ff35ac9b0
-
SSDEEP
6144:4fukuRwYsh+ZOWa+wTopoJAJnqs4Y+VWuASgosu9TwyKaV0TGEgJ4cDmdvrd+D7j:ZHOhQPwDAb44sgosmVfE84uOpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5c7256cf831c95ee202b87153c3a34_JaffaCakes118
Files
-
de5c7256cf831c95ee202b87153c3a34_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ