Static task
static1
Behavioral task
behavioral1
Sample
f69d8f7707fd214fad1dbf3f1f1765a9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f69d8f7707fd214fad1dbf3f1f1765a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f69d8f7707fd214fad1dbf3f1f1765a9_JaffaCakes118
-
Size
556KB
-
MD5
f69d8f7707fd214fad1dbf3f1f1765a9
-
SHA1
2a06deaf1ad3da40cd72528e04336f6bd0f16871
-
SHA256
0efc0d67d9be3cbc40ab4ad49b85d9cc4bb5997211899feb7437e427831015fa
-
SHA512
916994ec83f490f64a7b72ef4fead205d96d95b0f7fb0437af1e2adb9bc2254174fc58e2ca902efdd6b5f2046183f591a7d0800bbe853e0417d2ad4ea7263cd5
-
SSDEEP
12288:QSgWYL9+BCta5h7woBS4y721TlFLnccwFuz4MFeuu3qAM2ZAZ3DWjitGginvQj9O:QSgB9+BC8ZBS4qHurFeuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69d8f7707fd214fad1dbf3f1f1765a9_JaffaCakes118
Files
-
f69d8f7707fd214fad1dbf3f1f1765a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 554KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ