Static task
static1
Behavioral task
behavioral1
Sample
efdd39a444a372d5d14bb208f128fb65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efdd39a444a372d5d14bb208f128fb65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efdd39a444a372d5d14bb208f128fb65_JaffaCakes118
-
Size
171KB
-
MD5
efdd39a444a372d5d14bb208f128fb65
-
SHA1
cad364d6c9a92bd01256817f88a1038d2aba8a30
-
SHA256
d123446e91051c2c75b9abe56f465345b0a56a2c4f3bf1b3d57545f2a58c46c6
-
SHA512
ab819352530676d20c191d01fecea1c9c23e5f77f693902c556851b57f6c55e38fa61303fd3f754fc82f386a6fe189c143056f96bd068ccc0851427cc3784d00
-
SSDEEP
3072:LH7LIMYNP/5re+Kj/L+0tEbXSza+Xo62ogXOb0//DdqmW1y:r7LIMYNPl2L+0Q8a+FGOb2bdqmW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efdd39a444a372d5d14bb208f128fb65_JaffaCakes118
Files
-
efdd39a444a372d5d14bb208f128fb65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ