Static task
static1
Behavioral task
behavioral1
Sample
56cb7c534513b2b40aab6c79231073c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56cb7c534513b2b40aab6c79231073c0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56cb7c534513b2b40aab6c79231073c0_JaffaCakes118
-
Size
129KB
-
MD5
56cb7c534513b2b40aab6c79231073c0
-
SHA1
97142673797ad2e85508723021bf243c105e7d95
-
SHA256
ae1f964958fcc55740696f56e524c7f93cb0310d348ccb47eaba71b21139b7ce
-
SHA512
2a6a8a496e63f628a1f3df834620a798433e41811a998fb96fe0f862b2c9d05659f52fd3f12bc9034fc0f4b0a420bfff13fa3075b5b51e268cf8d746d1e211f5
-
SSDEEP
3072:9l4sgtqiZH53luMvVaHFHILggFDrSKqDW5iQ/n1rsoRz+j1d:9x5QH58MNUVIDrSUNhs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56cb7c534513b2b40aab6c79231073c0_JaffaCakes118
Files
-
56cb7c534513b2b40aab6c79231073c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ