Static task
static1
Behavioral task
behavioral1
Sample
ff857d85e42a7899ff3ddae2a8e2c453_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff857d85e42a7899ff3ddae2a8e2c453_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff857d85e42a7899ff3ddae2a8e2c453_JaffaCakes118
-
Size
98KB
-
MD5
ff857d85e42a7899ff3ddae2a8e2c453
-
SHA1
75676388199e44655f624b688ae4dee070a92d19
-
SHA256
8c7497d2a1a71f1ba58e0b7475d93a045e017ab2b7c9f11f2a22318465affd37
-
SHA512
4fb55927d82222f8a6a2e0e3d8fa45206349d7edf50cd4613785a3a35c8f0d2fb1a66b991bf8d1de581224a4e5b2288713497b28d73282816a7c24157a39b455
-
SSDEEP
1536:992pV0eVxCKw36yOkAXrQ2SbKiHrDGirgdNfOAEtrw4Vu0CDPXx35n51:9Ojw36cAXrlQKiHrDqjDsrUX/95H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff857d85e42a7899ff3ddae2a8e2c453_JaffaCakes118
Files
-
ff857d85e42a7899ff3ddae2a8e2c453_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ