Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a5e22653e3058b0b804eef1f961ad398.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a5e22653e3058b0b804eef1f961ad398.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_a5e22653e3058b0b804eef1f961ad398
-
Size
1.1MB
-
MD5
a5e22653e3058b0b804eef1f961ad398
-
SHA1
bf634599868679a3c215aba59ae0040e867d3022
-
SHA256
3f3be2c601c7ee51d244779e9d3a6f847c3fb1754dcf3caef0885d809d488e58
-
SHA512
40e538627d1187008fdb1d6e27890d6ffb3b0d3e3005dfba3861169223c862e7484670fcee69b7b06b4b5675109365df2f4e8dce9ce628570e26b0a6a9721f13
-
SSDEEP
12288:Yl+aV+ZtWsMxXvl7lJ4d77ppwZP5b5Bkh9mU+o55avzAkIbSrzY8CtkU7Uw6G08w:E+SEcF3g/ppEtTprk6zwAtL1hiH3u1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a5e22653e3058b0b804eef1f961ad398
Files
-
JaffaCakes118_a5e22653e3058b0b804eef1f961ad398.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ