Static task
static1
Behavioral task
behavioral1
Sample
3e051c874adf5d4d29d50f16524c32a5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3e051c874adf5d4d29d50f16524c32a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e051c874adf5d4d29d50f16524c32a5_JaffaCakes118
-
Size
577KB
-
MD5
3e051c874adf5d4d29d50f16524c32a5
-
SHA1
1770f5ce4f61419fc012656918637813345533d4
-
SHA256
c4a153e412d20c6225b6c4778ddc8e149ee0b6fee402cf02a4c927ebb9d1488f
-
SHA512
65644bc8134f1be9fc19825279eb2b00d9e692da56eec33256a15f66569b7dc032a116f194f0ebde33e8d2e8cddf99003b356c16b18bfb10b1d54e7cc371f13f
-
SSDEEP
12288:MhCDCb8zsqTUV10HJG8U/ET8H/azC99Fn3KEEG675sWlL+iS:gFb0TSaEBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e051c874adf5d4d29d50f16524c32a5_JaffaCakes118
Files
-
3e051c874adf5d4d29d50f16524c32a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 543KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ