Static task
static1
Behavioral task
behavioral1
Sample
afd99d61920e4ec13867a79c3b108d50_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
afd99d61920e4ec13867a79c3b108d50_JaffaCakes118
-
Size
413KB
-
MD5
afd99d61920e4ec13867a79c3b108d50
-
SHA1
6f40885b618fedc62b760fbcbbf142a2a271bdd0
-
SHA256
1f39e6a010f115acd80ff77f51014ec51c73add290d5377f8b3e13445761c77f
-
SHA512
907e8edce6998f471e185a1dda7cb39b7ded298641d4d942cede90731913a68eff2fab9f292d50318863b53b16ff10a407040952692aec1e15ce95756a4cfd6c
-
SSDEEP
6144:nf0IhhtpWXswZQUvAjXAYAabyAI4AeLa8xThl+un1cE/N45MuOI0pkxLR78GKlhc:bhtpWXx3E/NyB0SxLRNkU0fqmu7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource afd99d61920e4ec13867a79c3b108d50_JaffaCakes118
Files
-
afd99d61920e4ec13867a79c3b108d50_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ