Static task
static1
Behavioral task
behavioral1
Sample
255ef9669e81a114c785d21ff58b7293_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
255ef9669e81a114c785d21ff58b7293_JaffaCakes118
-
Size
407KB
-
MD5
255ef9669e81a114c785d21ff58b7293
-
SHA1
f57552b6a4b2553feca0b7aa98b9fc60fc3036bb
-
SHA256
cf495989e776f59e020fad15bb34b5f92573f9a1b96a51cdd5a02d31d339d502
-
SHA512
b8980c81f92082234413b0828e3bf317fc691d082eaba3682758b9bff48fe25bba3dd22b5bf5db5f4eb84c0b5e9e491721accada1fc767882f36293c263eb5dc
-
SSDEEP
6144:jJmSSRjQRlyHEJjlQG/FryGFvfRf+BCKSot3Jg5BJsOWKNvciKMkhB:EMwHE1FhFBGBLSoIBJsOWsJSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255ef9669e81a114c785d21ff58b7293_JaffaCakes118
Files
-
255ef9669e81a114c785d21ff58b7293_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 405KB - Virtual size: 405KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ