Static task
static1
Behavioral task
behavioral1
Sample
8c99eb916948aefa07aafc8e64705a0f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8c99eb916948aefa07aafc8e64705a0f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8c99eb916948aefa07aafc8e64705a0f_JaffaCakes118
-
Size
592KB
-
MD5
8c99eb916948aefa07aafc8e64705a0f
-
SHA1
253ea4e5b14c06d24f395e06df4659e72b1c162c
-
SHA256
6da6f68611750b563a7af4f786b07f871ad8970326d344aca4b85f16315d3379
-
SHA512
d645c3917013a2220692ce8812ec38c3a9b2238dc60bb4cb0da5e005810d24baa681f39e32282a2fda8bfd4ecbd9c69d41567d2ca5dc00b8ec53c71065331862
-
SSDEEP
6144:tUeqreW6n5nVB7xL5+MMaBcE/0T4LRPU9FFUa/a9z2y2X75x5rVxekrfZgj83uiD:tZVgMTcs0TlFGavdX75r5rSapqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8c99eb916948aefa07aafc8e64705a0f_JaffaCakes118
Files
-
8c99eb916948aefa07aafc8e64705a0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ