Static task
static1
Behavioral task
behavioral1
Sample
14e650a1b5ccf3d04647b6059dcc27c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14e650a1b5ccf3d04647b6059dcc27c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14e650a1b5ccf3d04647b6059dcc27c7_JaffaCakes118
-
Size
6.6MB
-
MD5
14e650a1b5ccf3d04647b6059dcc27c7
-
SHA1
370f142e0bb005b100e5c1bd6e7a81adffe625fa
-
SHA256
b736ca091f881b9a951a1e24dc0d7d5267d59cd0bc82edea1d88568f64c7201f
-
SHA512
98214435053c4197286c56e6e639e3d8388dfcf1ebac74db718d880fdab176698c35a8a48ba68da3c3359a403c67d990d5b8e66772af9aa5fd8e0153f55ddc8d
-
SSDEEP
98304:dYaaML6+1y4VKlxm59ARsg7sLxiLi+7oPW2lBXmiRk/j+Sum6OHcwNgqbYovszAi:/bA2ix0ARNJLiVPWKMiwjam6Onew+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e650a1b5ccf3d04647b6059dcc27c7_JaffaCakes118
Files
-
14e650a1b5ccf3d04647b6059dcc27c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ