Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_23da40a6157e13bbeccdf5118648598c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_23da40a6157e13bbeccdf5118648598c.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_23da40a6157e13bbeccdf5118648598c
-
Size
757KB
-
MD5
23da40a6157e13bbeccdf5118648598c
-
SHA1
a46387e0d067862d3db1248e7e0d76b780020764
-
SHA256
032a0d61592304cf5f4e55e10a1628e540774e70d91b737de23f457e89b44b4b
-
SHA512
f38b731122c22ecd36ab8233a844097d9880211dc3f58220d02776495616fdf9a225de9dfa72c71f66ff39cc049df439cad09fb3f7c55dbfbe9926d4c99f4078
-
SSDEEP
12288:d/caYzHNMe7ab5jD8towM08wPojn92jwKL2rekk8c:d/c1NMrlEFxPM92jbL2m8c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_23da40a6157e13bbeccdf5118648598c
Files
-
JaffaCakes118_23da40a6157e13bbeccdf5118648598c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 409KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ