Static task
static1
Behavioral task
behavioral1
Sample
94cb17b4c72ade9c1c690c1036ab01d3_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
94cb17b4c72ade9c1c690c1036ab01d3_JaffaCakes118
-
Size
656KB
-
MD5
94cb17b4c72ade9c1c690c1036ab01d3
-
SHA1
df8fdfe796ea6c18287c33cd224ebe5709562588
-
SHA256
c1426732f06b03f0d2f0b2afd275bcd17ceb24d16174db630e10fab4fee09f04
-
SHA512
7e585106bad4d45e027a7ae761ac36ade47ef0d754ecea311ef83b91abc4d2a9fce862ebf30a93e640ac7a360f4b5c3b87e1e30bc49fee0818737e490126c021
-
SSDEEP
12288:RohvvUi0dZqQaRoMdtZdlG78GQe36Ns+qZ6W:RUnUiaZqzRoMRdlGvF3wsJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 94cb17b4c72ade9c1c690c1036ab01d3_JaffaCakes118
Files
-
94cb17b4c72ade9c1c690c1036ab01d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 653KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ