Static task
static1
Behavioral task
behavioral1
Sample
065adb2a8b5d2c8f25cac69c7a9daf5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
065adb2a8b5d2c8f25cac69c7a9daf5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
065adb2a8b5d2c8f25cac69c7a9daf5a_JaffaCakes118
-
Size
564KB
-
MD5
065adb2a8b5d2c8f25cac69c7a9daf5a
-
SHA1
46920c0f7dcb3e17b48299d75e3362697d5015c1
-
SHA256
63ccd7055c74da598dc6cbbf94e577c3393bf7beef62923d987c4a075e3635d1
-
SHA512
ecf30d0e0f3798299bc78ad2e637bcb9e9d1286a85da5cd7374aa4b58afce41dbdc36c6fbdc646ec4119e7172d1f7acbc85b860399fc249edaf2f60d095d9c65
-
SSDEEP
12288:sl5IJ5ZYSpJM55W5cxu6u7gnOSa1eT6I1Qq5CtwbLT5Z75PH/TBj:KIJTI5QcwgnOSaE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065adb2a8b5d2c8f25cac69c7a9daf5a_JaffaCakes118
Files
-
065adb2a8b5d2c8f25cac69c7a9daf5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ