Static task
static1
Behavioral task
behavioral1
Sample
ff5291b5c30bbbf405c624334159e77f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff5291b5c30bbbf405c624334159e77f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff5291b5c30bbbf405c624334159e77f_JaffaCakes118
-
Size
52KB
-
MD5
ff5291b5c30bbbf405c624334159e77f
-
SHA1
6a091e3d4dadbcd1af7e2cffe0553b3376e48e45
-
SHA256
b704b5fda1aafdc834337d7f2483924aa400f6855a8bbe00ae2951bfdf0aad78
-
SHA512
337405c8b670fece9713dc2cd6a878e3e593fe689d82cf2752ec8356b27e8de9afc392abd6a0df55a709526641fc4e3ca7cf525ec312599e75dfb8d1bc520e6f
-
SSDEEP
768:UJpNTPf6Jkj77vTT6KntSKihIj9nhEj0WoPFEDooo9:UhbMk37LT6L+n9z2DXo9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff5291b5c30bbbf405c624334159e77f_JaffaCakes118
Files
-
ff5291b5c30bbbf405c624334159e77f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ