Static task
static1
Behavioral task
behavioral1
Sample
64c96d9482e68988007c36ff8d3764b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64c96d9482e68988007c36ff8d3764b1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
64c96d9482e68988007c36ff8d3764b1_JaffaCakes118
-
Size
702KB
-
MD5
64c96d9482e68988007c36ff8d3764b1
-
SHA1
4e0fbc417a80ead8e64919d30496f01a227c4f54
-
SHA256
9c52db7859362b52c325ce724f2edbee2b954a1f9e9bf1f98ae0830abeabe8dc
-
SHA512
03e90f48e3e9bb489448c7ded268cd7735a542c1d5549c7f58532aeee9f844ae6ce2077072c0ff6c33d257811ab3bd7a32a36cb17fc42fb6542bd33433c8535f
-
SSDEEP
12288:iPCzeQ2FJQIhc2XRv/fpdY+pjgLwXzlmA/W7SGiYZWUzyYlSeMJqQb9HfoZRk4aF:tzT2vlhc2XRvmgCEYZpzy/qCEk4LKIZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c96d9482e68988007c36ff8d3764b1_JaffaCakes118
Files
-
64c96d9482e68988007c36ff8d3764b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 697KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ