Static task
static1
Behavioral task
behavioral1
Sample
544be302cf88a17504973487efcb88ed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
544be302cf88a17504973487efcb88ed_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
544be302cf88a17504973487efcb88ed_JaffaCakes118
-
Size
248KB
-
MD5
544be302cf88a17504973487efcb88ed
-
SHA1
18e3ee21e09a30ee4477058be6e198d5df6a076c
-
SHA256
bcd257a2ea0154e73ea32b01fb03b0d69f2ffd7267899bddd352aae16a5219b4
-
SHA512
314e6e7cc6b5958ad23f9fc0edf20e658650d11a5d98b1d7da0b60b3784ea426fb3735dac85b9ee3df6061af681863ed061913c4314a4e5e270516607db6b33a
-
SSDEEP
3072:Vom48JFYT9jqwYrCIW9OOHuwnDqnO9oFjg6kyNIRxJzQVMceJzQVYR:VbVwYrCIW9OvnSurPIRxFQVMceFQV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 544be302cf88a17504973487efcb88ed_JaffaCakes118
Files
-
544be302cf88a17504973487efcb88ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE