Static task
static1
Behavioral task
behavioral1
Sample
dfa76807d19ef4316271c3e5cb2b0fd0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa76807d19ef4316271c3e5cb2b0fd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfa76807d19ef4316271c3e5cb2b0fd0_JaffaCakes118
-
Size
294KB
-
MD5
dfa76807d19ef4316271c3e5cb2b0fd0
-
SHA1
b37e670bc659d194b687747f151b7359a2f6596d
-
SHA256
af1df40d52a494b81b3690b3897fdce3658b67fb3ffa89f7dc3312f4f9083759
-
SHA512
a343e46a3f69903e276f15d8251195ca432221b4a4d38d382d26cc998204450fd35d01812f1b6d011c5821e8d6febba3efa8603fc3745c2e17941a23e28fdcb3
-
SSDEEP
3072:SPw0ctcYYYYYYYYYYYYYYYYd8yC02wW1oOr9AE4sb4/lXNmqt8+KC+Nxt3eZ2nIc:SPwJcAjx4L/lntkC+Lt42nACm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa76807d19ef4316271c3e5cb2b0fd0_JaffaCakes118
Files
-
dfa76807d19ef4316271c3e5cb2b0fd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ