Static task
static1
Behavioral task
behavioral1
Sample
278462f6e98c795e1f617ebb63cd9b70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
278462f6e98c795e1f617ebb63cd9b70_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
278462f6e98c795e1f617ebb63cd9b70_JaffaCakes118
-
Size
820KB
-
MD5
278462f6e98c795e1f617ebb63cd9b70
-
SHA1
a8e8279359d48aea2980a3d9ef3e0c682ebf13cd
-
SHA256
f92b0ac5d72a8bead386ad9bca4fb51523f2da63f6d3a2e195bc0e83765022c1
-
SHA512
305232be4197314dee85cd4fcf17fe5433655c66028fcd9c366c19ee963db3de0e1826c34b97a7cb2b1566cbbb170091b9d51ae58bf5df0c4d8be71a05575f2a
-
SSDEEP
12288:21Cw+Jc8uvx6k9y/n93aPtwQKp2pUsdRB0HK7zS6L5cAI7RGZPqKv6jVne59wXWi:ty2939QJdxW6dcAI9GZPRydezDWIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 278462f6e98c795e1f617ebb63cd9b70_JaffaCakes118
Files
-
278462f6e98c795e1f617ebb63cd9b70_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 717KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ