Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9904642b21158de36088bd38ab85362e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9904642b21158de36088bd38ab85362e.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_9904642b21158de36088bd38ab85362e
-
Size
268KB
-
MD5
9904642b21158de36088bd38ab85362e
-
SHA1
f1e58513de0fb55fd8cf298e755f9d286e17b255
-
SHA256
0b6fbb1a3dda4cfe83c7ce3657b43bc4ddc5c5a9964600014bdad2391e5d9932
-
SHA512
cc09d065de647a93a43e647cedca885555e0ba23e0eaac0c7cf1aaa16f8dd9f9947d1549983b7bdca077d4e0ea02475099fc33cfc00178a71c2e7f7905d05026
-
SSDEEP
6144:d90wQtTouTbSnADvtJBd40B2WFLwfrNsPvrMUMB:dfQPTeADvtnCI2asirMt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9904642b21158de36088bd38ab85362e
Files
-
JaffaCakes118_9904642b21158de36088bd38ab85362e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ