Static task
static1
Behavioral task
behavioral1
Sample
ead1fdb488cb0146d566afd8cefdca87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ead1fdb488cb0146d566afd8cefdca87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ead1fdb488cb0146d566afd8cefdca87_JaffaCakes118
-
Size
584KB
-
MD5
ead1fdb488cb0146d566afd8cefdca87
-
SHA1
fa7aa019eb888139f75ba66443e98308221d9685
-
SHA256
3489e4cbc671aba97d436a070dcfbdc2dd07be9939a06988fa127e4c6c812b87
-
SHA512
88e253c58e4285411ebf6b49fc271a83ec6f3831a2515a4b13c54d8c6961a7d492f681f8817e2aea853eb171e23f0fed6a198a0ad958ff1be7c2d9c48e7ce622
-
SSDEEP
6144:Jm0uLGfyyJQptTF4zAmhXKE5PP5Uw1CL6OM6ngT+61X4stakNtWby4tWtCwIjZtM:Jm0uLGqyJOf2XK8Sp2OLQTZlIjZ3rx9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead1fdb488cb0146d566afd8cefdca87_JaffaCakes118
Files
-
ead1fdb488cb0146d566afd8cefdca87_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 580KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ