Static task
static1
Behavioral task
behavioral1
Sample
0ba8364c2c609f15a3427eeb15cbf9cb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ba8364c2c609f15a3427eeb15cbf9cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ba8364c2c609f15a3427eeb15cbf9cb_JaffaCakes118
-
Size
180KB
-
MD5
0ba8364c2c609f15a3427eeb15cbf9cb
-
SHA1
20c9a6eec5df9ecc5ac1205dfc35f7f8a17f3d82
-
SHA256
01b92655a4ec3394cded3e5a61c3c642a7030b8afa8f26e4b30e69d386ab272b
-
SHA512
597886d9cc2fbeb276b889a2253cafb59dd31b20ed0143602a75028c241685f9430a4a072fd6d0270ea0c93e2433d63608341d14f046b6b409e89432896588ac
-
SSDEEP
3072:nKtcEyZNPFHDFFk4qMnMgqUrZOD069N5i/jOReHD2ZjgDVomdJowFs1sgfzvJ:KtALFjFSvUoz9dReHDXp+3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba8364c2c609f15a3427eeb15cbf9cb_JaffaCakes118
Files
-
0ba8364c2c609f15a3427eeb15cbf9cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ