Static task
static1
Behavioral task
behavioral1
Sample
f5e24f50b635d7c0fc800d3cfc3e9a46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5e24f50b635d7c0fc800d3cfc3e9a46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5e24f50b635d7c0fc800d3cfc3e9a46_JaffaCakes118
-
Size
674KB
-
MD5
f5e24f50b635d7c0fc800d3cfc3e9a46
-
SHA1
437b6a8f4b18957430792ccce75d73df6f1f3986
-
SHA256
7a5eb5eb5798eb1dd6ac3be8a4c500807068eb345be0e71dd39059c223aad69c
-
SHA512
72d374516d2a42aba0dc9692a7256f212054c007b13b791c299a693b2e7c6b50aad789b51e909286cb8a248e2b9eae432cb46993d2ac452230a4347fcfb2c084
-
SSDEEP
12288:EL+o40eCwdRjH6qC9RbV9hg2lLfF+4FK5iiMpraZ+4ZGQuh1bdvF/fxy1BGZq8pH:fCwdR6qCvbPi2dfFX85+4sQuTfpy1BGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e24f50b635d7c0fc800d3cfc3e9a46_JaffaCakes118
Files
-
f5e24f50b635d7c0fc800d3cfc3e9a46_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ