Static task
static1
Behavioral task
behavioral1
Sample
f0bd4ede937b7ae5acf9248d5dc00e00_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0bd4ede937b7ae5acf9248d5dc00e00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0bd4ede937b7ae5acf9248d5dc00e00_JaffaCakes118
-
Size
40KB
-
MD5
f0bd4ede937b7ae5acf9248d5dc00e00
-
SHA1
1eb118c355eb15c829f5dc7260f1e9c3b61a09b8
-
SHA256
2ee3d46e8d4eb5af42a58a748c3bb032cd669eec48e7a38103f1f8e38dbd7314
-
SHA512
6f1726d0b32e26b0863dca4d757424f356e5de69c8c33784cc83cc3e17fbc8546732b3dd756c58a21b0cd6435c3ef0cae374353a8911dc46ed01663b7b10d8d1
-
SSDEEP
768:Aglx/lfl2HqwnXxoIPQe6EyPtHjaloRBC:ptD2KwnXxoIIRBaCRBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0bd4ede937b7ae5acf9248d5dc00e00_JaffaCakes118
Files
-
f0bd4ede937b7ae5acf9248d5dc00e00_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ