Static task
static1
Behavioral task
behavioral1
Sample
55a03d13ba5d9650dd4f07d6d1626a3f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
55a03d13ba5d9650dd4f07d6d1626a3f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55a03d13ba5d9650dd4f07d6d1626a3f_JaffaCakes118
-
Size
3.5MB
-
MD5
55a03d13ba5d9650dd4f07d6d1626a3f
-
SHA1
c9767d1c2d982d92ebfdbd664fe37b6acc0c50e1
-
SHA256
3ac0c1e02573b26b7eb905ef84d3963008e47a3daa7cecbbc2cc7d487b9446e9
-
SHA512
1d699d6ab992c83a19a05b6bfa058e10c7e1514979179beb29f9bf4bea441959e986fc86491394c649c10c0bac6036b0f4b37ef515241d7a7b25e8bfa4ecab56
-
SSDEEP
98304:Annnnnnnnnnnnnnnnn+nnnnnnnnnnnnnnnnGkKNOOW9pY4Pz2uLviAAWAYbZm2WU:Mko4L2uLvThZmLtXnXCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55a03d13ba5d9650dd4f07d6d1626a3f_JaffaCakes118 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
55a03d13ba5d9650dd4f07d6d1626a3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ