Behavioral task
behavioral1
Sample
ca635ade9c58ac45f54483f4e6a30b82_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ca635ade9c58ac45f54483f4e6a30b82_JaffaCakes118
-
Size
361KB
-
MD5
ca635ade9c58ac45f54483f4e6a30b82
-
SHA1
a91938fadba06e347903f6a4abe1af30a21f2d07
-
SHA256
2c839c357b85bc65e982067f854d9ba66914b2177f3301e61320ae9c521278c6
-
SHA512
38ba94f0e9f9b5196b2c2fcda5bd185b7c1e83450e4eb85d1b74e549d9ffdc9deecf89696e66ba9ad4c693ee5fc2622ae3e4225634cada5878bbaa7f6e0f8041
-
SSDEEP
6144:BRZwtnqX24LAxOoWi/vTGMIYsAOdrp7IgibcDDtihjIr:2tnab8GMIYsL3kSr
Malware Config
Signatures
Files
-
ca635ade9c58ac45f54483f4e6a30b82_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
)\(@ Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bed Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ