Static task
static1
Behavioral task
behavioral1
Sample
0206ca0ddad918a6121ac709b3599cea_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0206ca0ddad918a6121ac709b3599cea_JaffaCakes118
-
Size
427KB
-
MD5
0206ca0ddad918a6121ac709b3599cea
-
SHA1
b3368b58520018264475688f66ee1c3406eea411
-
SHA256
3781d189279634e678c92e0d9146beae3c975f8c610e5464cc21a3ba645d00d7
-
SHA512
e488d2f93837e4466a584b6afe869d537f2144fc34ee074c21a8b9a90b778a04c3fb7cf5e76ba3655fde6bbf05e51907eb6376041a7707849df68ab2788d730a
-
SSDEEP
6144:gMlgrNCNMjbVs/cJeV5Gx0Sz21TWFs5Q6xrcyFozSm2S9JNXRO5Y:+YBcJsG3SQdvyuX9DRO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0206ca0ddad918a6121ac709b3599cea_JaffaCakes118
Files
-
0206ca0ddad918a6121ac709b3599cea_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ