Static task
static1
Behavioral task
behavioral1
Sample
df5a46404492878def2c46c49b144886_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df5a46404492878def2c46c49b144886_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df5a46404492878def2c46c49b144886_JaffaCakes118
-
Size
760KB
-
MD5
df5a46404492878def2c46c49b144886
-
SHA1
796420eff8f82cd13049d5a5b2a3bd5ad562ef99
-
SHA256
f78945d246d6cdbf83b72b4e3c663e590b70f7560ccf5c8b23c4bfab826bd3e4
-
SHA512
212d463e8657d5882514a847c91893be413f600cbb9ad7d8b5c2dace1f3635a276fa0c901d5087886518fd304b8cb8199243c9615843dd2095df10ae71ddf2b1
-
SSDEEP
12288:JXJJszpm6y1aNulXdS3t5N6YioYHCloOKevClseLBySO1tYLyt6mTBgKebkYqbrE:mpY1sulNS3t5N6uaOK2OBySXY1qk7Kdz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5a46404492878def2c46c49b144886_JaffaCakes118
Files
-
df5a46404492878def2c46c49b144886_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 757KB - Virtual size: 757KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ