Static task
static1
Behavioral task
behavioral1
Sample
1477f266625f4d11187d850d5b94b160_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1477f266625f4d11187d850d5b94b160_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1477f266625f4d11187d850d5b94b160_JaffaCakes118
-
Size
934KB
-
MD5
1477f266625f4d11187d850d5b94b160
-
SHA1
ab2fb763af8bbafbf35a357efd29510a7664f956
-
SHA256
064a65a6ae1348cf7cc53eaf72d4500f1df9bd9eae802dbab106da590c0f8ce4
-
SHA512
4bc6a412864d0f1e624a563377b8b76742ca1ee5c975090a58276b11e44a16ee321ccb03130ba459f77e3f7a218c47d2ee50ab8a55e4e7919687335f7d607cd0
-
SSDEEP
24576:PEeY+RVrKRoMkeh6pL/1HOUYVhay2pbSuehMuq:seYMMkeh6HsMuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1477f266625f4d11187d850d5b94b160_JaffaCakes118
Files
-
1477f266625f4d11187d850d5b94b160_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ