Static task
static1
Behavioral task
behavioral1
Sample
ff89dffd701daf14fa7eed5f7954d435_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff89dffd701daf14fa7eed5f7954d435_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ff89dffd701daf14fa7eed5f7954d435_JaffaCakes118
-
Size
56KB
-
MD5
ff89dffd701daf14fa7eed5f7954d435
-
SHA1
441bff8be92540ef635caaff16c602b406b83fac
-
SHA256
f3868d1dfc4ae5014f7d28f7c81904b44a12c2b7eb08ed6cfc1bdb7ab87d4a1b
-
SHA512
a13ebbfcac128b5470875eb4ca77a34af67118a5434e9d90518b2954c5afc7a2d378c1e5f715b70253d6330a59f73e1342618956271c1dff14d6bd68166064d2
-
SSDEEP
768:OGjm7kZMFhBEUcQVUQWE0JDxRnnuJa6kMVt63Dw/UypZBkdw:OG67kZIMU7dZARnnwa/XE/Uy+dw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff89dffd701daf14fa7eed5f7954d435_JaffaCakes118
Files
-
ff89dffd701daf14fa7eed5f7954d435_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ