Static task
static1
Behavioral task
behavioral1
Sample
0dcc361553fe497023f29c8d28737ba0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0dcc361553fe497023f29c8d28737ba0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0dcc361553fe497023f29c8d28737ba0_JaffaCakes118
-
Size
850KB
-
MD5
0dcc361553fe497023f29c8d28737ba0
-
SHA1
75326ff915d4edeae7a487e2f65ca55ee0530493
-
SHA256
9e00090288be051490c74a5312eecef231b65f6fac5398631f4a0b2e62f70d63
-
SHA512
aa15527ad214904ee813f619f8c9cdccb0b84eb6d086afe5142f6b789d3c7f08bdba97411eaba4695486219c48ebb154a46010aee476082521f76c3c72641b52
-
SSDEEP
12288:3rwaoS24Eh8Z/Eij6gAfKS3e50NwTCDsw7rYnHwwYFvwV809ygb1MeeoWQY+F9NU:35ZX8LVsYF4VsWW3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcc361553fe497023f29c8d28737ba0_JaffaCakes118
Files
-
0dcc361553fe497023f29c8d28737ba0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 846KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ