Static task
static1
Behavioral task
behavioral1
Sample
05e1afc06d4d498c518db928c538439e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
05e1afc06d4d498c518db928c538439e_JaffaCakes118
-
Size
543KB
-
MD5
05e1afc06d4d498c518db928c538439e
-
SHA1
483a2e9f7da3fe655a885b0b704682f394ed70a1
-
SHA256
6ffe756ce71f1457d7dd480357f3545f123b750fc4bf30683b59887d491948a7
-
SHA512
b1de35313515a91cd558cb798d9e7f1f19ee1858461bd0cc302b15740f719696fd3d25598ac6e95ede701de31069ac294b84a9e8c29b39b0a99a478c7da14639
-
SSDEEP
12288:dSBz/nnqAEjkLUuX9X9FGFZUeP2ltYK96R:QBqFuX9XvGoeultj6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e1afc06d4d498c518db928c538439e_JaffaCakes118
Files
-
05e1afc06d4d498c518db928c538439e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 443KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ