Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2521a6f06eacdbd5af4ecd295d933fb5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2521a6f06eacdbd5af4ecd295d933fb5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_2521a6f06eacdbd5af4ecd295d933fb5
-
Size
484KB
-
MD5
2521a6f06eacdbd5af4ecd295d933fb5
-
SHA1
31d67930d6f1ad3959ecc42294012a2442fd3b34
-
SHA256
d05f40601d41dc2f50f647b15562e8750cac4fde72a5e60d7b0a43b5547a076c
-
SHA512
5717314edade898623bbd22522794e1885e4ef5dd88a514f3179c49d6a8cdd3b723d04c1e25b891bc073b9a0085074827ce5779f52ea80d4ef8580e74fdb2d20
-
SSDEEP
12288:VB5kSBL0EE6eiYxvDFL4qSduOma7YglLkY+:B5BLZE6tYFDFL4twgK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2521a6f06eacdbd5af4ecd295d933fb5
Files
-
JaffaCakes118_2521a6f06eacdbd5af4ecd295d933fb5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ