Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c
-
Size
562KB
-
MD5
f34a430619e5668615cb3ada04be4216
-
SHA1
9c1113c380db483ceb5efc712e7179cace0fefe3
-
SHA256
b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c
-
SHA512
18218a0537eec400cd414b00fcdbc21c7edd8ac39139407fac4f872fec7309da391ec69249d947d9a92e8410e3d0477c57a029a9b3ae771eaeeaa80dd445592c
-
SSDEEP
12288:FEIS3A/ps/uSaSXO9bZMEp+CGE8eGaOko2vaR:FZS3AVj9np+CSey2va
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c
Files
-
JaffaCakes118_b584bd384f721c35557bf7acc7bb9c789d74804da8b8dbb3fd7c39586571cb1c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 449KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ