Static task
static1
Behavioral task
behavioral1
Sample
f6b3d766be7b8f4a97eb95002c406e9d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6b3d766be7b8f4a97eb95002c406e9d_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f6b3d766be7b8f4a97eb95002c406e9d_JaffaCakes118
-
Size
56KB
-
MD5
f6b3d766be7b8f4a97eb95002c406e9d
-
SHA1
aafb1db37c648c842dee7b5a864f96d208025af5
-
SHA256
cb5d9b4c6e3c4707d7a0ac42a9e8b75c1f899650ee6d5e9b24185cb92673c461
-
SHA512
42b38cc10f60a30d9cd09726eaad846cb25936df2d119a15fb6a59c92ab3565d99ec70172e5dea05804b0667cb8ffade8e54bf0b6a66670afd5087b2e0c8cc61
-
SSDEEP
768:88bywLttpuJHnor/KAzcOMcg5HdZds7bkAfxmLtTXCSMsmAiA6QOAHq:8OLLia3wxcKNaTxmLtTCSMsmAiA6QjK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b3d766be7b8f4a97eb95002c406e9d_JaffaCakes118
Files
-
f6b3d766be7b8f4a97eb95002c406e9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ