Static task
static1
Behavioral task
behavioral1
Sample
f97e902fc5f271b2c7ff90c7ad7cebf0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f97e902fc5f271b2c7ff90c7ad7cebf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f97e902fc5f271b2c7ff90c7ad7cebf0_JaffaCakes118
-
Size
44KB
-
MD5
f97e902fc5f271b2c7ff90c7ad7cebf0
-
SHA1
ca3e9c29c0cb2e61c6f1c4ce3b51e67aecef6a38
-
SHA256
59815520996bf363720cd81add37b217549a2e64a482f2fa7f71082591f9c01a
-
SHA512
eef4b933ae19128ec88ebd9fac6aa14915b703f58cc098ea8f946582c6df29a99ffe7c5f9836dfbaf4f5bfeb19bce6bb02563059383d28d09dec08646dfc76eb
-
SSDEEP
384:fgMVI6utFCLUOye2FTAw60IfXmFEFjgQc9mVGHcyaXkrMGVDJuFsTnnVn+9K+4NP:YMVI6utFCRwwXqEFMQc9OyZM0xn+9qn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97e902fc5f271b2c7ff90c7ad7cebf0_JaffaCakes118
Files
-
f97e902fc5f271b2c7ff90c7ad7cebf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ