Static task
static1
Behavioral task
behavioral1
Sample
54c59f75ebdd3f5856f6ba7a3632f0df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54c59f75ebdd3f5856f6ba7a3632f0df_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54c59f75ebdd3f5856f6ba7a3632f0df_JaffaCakes118
-
Size
155KB
-
MD5
54c59f75ebdd3f5856f6ba7a3632f0df
-
SHA1
ec7e6242b93a9da7318d2908676de65c3855abeb
-
SHA256
f0c477cb0839e38c383347be3fe78160bf97ce17e5db2c6b59143fc743d3ee47
-
SHA512
2979d6d243828f8fc510ef5ea1454cdf441b5e798f8f5ca0f9131282fa46bf4974af9fde686fec4a106a10289d2f0009890395bba74116b3dcb80151398b2616
-
SSDEEP
3072:ZhySIFZMHLixm4L9GB/XMuXOicYIrZtC9uqj12aR1RaPz9VNEGyeF12d:fySIF2HLym+GBvVNs+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c59f75ebdd3f5856f6ba7a3632f0df_JaffaCakes118
Files
-
54c59f75ebdd3f5856f6ba7a3632f0df_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ