Static task
static1
Behavioral task
behavioral1
Sample
3aba057cf1299bf2db8a7aef50a2ad0b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3aba057cf1299bf2db8a7aef50a2ad0b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3aba057cf1299bf2db8a7aef50a2ad0b_JaffaCakes118
-
Size
624KB
-
MD5
3aba057cf1299bf2db8a7aef50a2ad0b
-
SHA1
95bda62c27f4bc711ef9ae26492dbba1b803a25c
-
SHA256
3c3034474b6b13cb6c7170d7d64cd6ca1d2caedd17ee4721e8d283ab88e8455b
-
SHA512
305e385a0d2eaff30b606b81cd7c1f9f345c3957d356487130dec0da2b4fb56c1bce0960396e00b8ee12ce9959e811ef8ee8752b04f179338deb6f0df7a9fb31
-
SSDEEP
12288:c/1xb0Sm4/pW2dsuRIPHBb+6REuafAc+qajDPBQNMffIE26HlWmsN6r1ojlUSLrU:c9xb0SZ/p/dJIfBJ5afAc+qajDPBQNML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aba057cf1299bf2db8a7aef50a2ad0b_JaffaCakes118
Files
-
3aba057cf1299bf2db8a7aef50a2ad0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ