Static task
static1
Behavioral task
behavioral1
Sample
289e8f06352aec6852ae2f9b33675326_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
289e8f06352aec6852ae2f9b33675326_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
289e8f06352aec6852ae2f9b33675326_JaffaCakes118
-
Size
1.9MB
-
MD5
289e8f06352aec6852ae2f9b33675326
-
SHA1
24ba27cf6790764cdac359518177b6a50435879d
-
SHA256
fc1523c2b4d8254bdeb40e763eaa6199e29b7a6f0269827cafb7965d6d24cb84
-
SHA512
0e336341bb07e95df22e05af04f34efe21b87d1f673f8ab6865e90fdfe3b97c8ac1e3d71cc4786fe6bf470373a4b7fa2de6b1bbfa47450a33f71ab076bb84090
-
SSDEEP
24576:xWDWDWDWnWg7WGuWpgJLe+sK8vqexsusyIyo9uAdW:UiiiWgcWJX0ex/s79uAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289e8f06352aec6852ae2f9b33675326_JaffaCakes118
Files
-
289e8f06352aec6852ae2f9b33675326_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ