Static task
static1
Behavioral task
behavioral1
Sample
f537fb649351697bab504875a6376248_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f537fb649351697bab504875a6376248_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f537fb649351697bab504875a6376248_JaffaCakes118
-
Size
970KB
-
MD5
f537fb649351697bab504875a6376248
-
SHA1
a1172ce706c7cfe515bcc7d5bdc0fd4331229c68
-
SHA256
88db5475450967cf49cc6f8f167e0f4fdf0a52e098ec696d778d5b6a272958c5
-
SHA512
8a98705dbaf60d842a985c8529db8f3d48a1cc4ddf15f910f275be2d6c663b26c7ecfa63ce274e97dba21edc876997165f163a99dc01cacca9a78f0ec69b12c5
-
SSDEEP
24576:xoJb8qGbsCV4HJb31EpJZYDTDO7ctLHu:xEoT3KTEJZYDT6YtLH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f537fb649351697bab504875a6376248_JaffaCakes118
Files
-
f537fb649351697bab504875a6376248_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
"B"_R,; Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ