Static task
static1
Behavioral task
behavioral1
Sample
9edbd70f469f38f0fcf5a1e9b6100189_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9edbd70f469f38f0fcf5a1e9b6100189_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
9edbd70f469f38f0fcf5a1e9b6100189_JaffaCakes118
-
Size
1.2MB
-
MD5
9edbd70f469f38f0fcf5a1e9b6100189
-
SHA1
8948e087b4e0df3b15851f8f4f459f86015ee82e
-
SHA256
ea1b64729cb531c6a8bed9ef45e4d6ed40e04715a4f385224254f9f2b7449c75
-
SHA512
15a05ba6db95722fe1434ba7b8107d194cf59af959fa7804bcc937f254fff23345d7d8cefb99e3ed2249dfdf7a9c0282d37fec15927487bd7d49d08d44ca0f3d
-
SSDEEP
12288:+ckvkwUjD2xDvLCPFGakc8d0g5LQfsVRG8hoGvDUF8GGGHXDlxlI/A/EUdeocznQ:tO7k2A3vHnlIsAznuGAKoOqea9/aC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9edbd70f469f38f0fcf5a1e9b6100189_JaffaCakes118
Files
-
9edbd70f469f38f0fcf5a1e9b6100189_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ