Static task
static1
Behavioral task
behavioral1
Sample
8279edc14cc42685f7fceefe384ddf0d_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
8279edc14cc42685f7fceefe384ddf0d_JaffaCakes118
-
Size
389KB
-
MD5
8279edc14cc42685f7fceefe384ddf0d
-
SHA1
d6b01e94dd1528eb364e16db7bc6a5e06a66bde6
-
SHA256
5a573da6707c9373b0f49b049b07ddc21bc6976195b834473d0be2daaf52c173
-
SHA512
6a1963004eb2cbfc49c48b638d70a9f7a9fa9ad24629bb78f2cdd31ad84d3a3908d707d51d88f5cb2f8acc7c9cab0725d84ca8957b3d32ea194205e3390d6f95
-
SSDEEP
6144:kKq6ZZmDQ+3HwOEjhH+KU8b1Qy6mK8WRAYfnsdtGfBYmP6tKX:skoq1BTbKy6x8/vdMfBRX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8279edc14cc42685f7fceefe384ddf0d_JaffaCakes118
Files
-
8279edc14cc42685f7fceefe384ddf0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ