Static task
static1
Behavioral task
behavioral1
Sample
0cb21e5d429d955a239c99d4353ef1bc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cb21e5d429d955a239c99d4353ef1bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cb21e5d429d955a239c99d4353ef1bc_JaffaCakes118
-
Size
829KB
-
MD5
0cb21e5d429d955a239c99d4353ef1bc
-
SHA1
3b147320a85a5c3e80c0db602af9ed8e7ef8b68b
-
SHA256
b637b1c6ecee2e6c4f4b13d917bd128387b0cd40975320bd80339c986a2f9964
-
SHA512
a93c839db0aff634463b62bb9083743e083c701c64f768eac170abb53ac2f1f85136fc39c1cffcb9058e90c257374b1ed0b5bb284285193448dce83cb8f9ccf7
-
SSDEEP
12288:QnYeVfVI69eFnOz/S5P1PTcvyMjvbZ9CCzbq4KDwlCvSPKaTF4+OXjhFQI+hOngM:RsOTWv07vponOD5iCLvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cb21e5d429d955a239c99d4353ef1bc_JaffaCakes118
Files
-
0cb21e5d429d955a239c99d4353ef1bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ