Static task
static1
Behavioral task
behavioral1
Sample
d3e5eae0fe3faf65689d27d07ce9e66b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3e5eae0fe3faf65689d27d07ce9e66b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d3e5eae0fe3faf65689d27d07ce9e66b_JaffaCakes118
-
Size
1.7MB
-
MD5
d3e5eae0fe3faf65689d27d07ce9e66b
-
SHA1
32ec1c5784fd5fa1394e41365b47f3c3e313c91d
-
SHA256
94540de5569ee70fb3bd42b0d16674fbfae94c16df1991bcf0453c57d2b0be8f
-
SHA512
f73010d8f144f355fc7b3d65c2e92f500b7df7ec26e12e5f74a860ffdccd8ccd5ad046f1ce8a02f8c69058ce2da3244f4239f4ddb9a55f052a7847e35fac925c
-
SSDEEP
24576:BggmIehxUkUFjSU1I6iCLhG64+5+Nb2RUvTzD8G2wH:zGCJbGT+5+NcUvfD8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3e5eae0fe3faf65689d27d07ce9e66b_JaffaCakes118
Files
-
d3e5eae0fe3faf65689d27d07ce9e66b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ