Static task
static1
Behavioral task
behavioral1
Sample
f194d7ae32b3bb8d9cb2e568ea60e962_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f194d7ae32b3bb8d9cb2e568ea60e962_JaffaCakes118
-
Size
193KB
-
MD5
f194d7ae32b3bb8d9cb2e568ea60e962
-
SHA1
2e96571159c632c6782c4af0c598d838e856ae0b
-
SHA256
88184a929722705ecf5fd0631703e8b11f20a7a3145d2d94c18401cdb63d4221
-
SHA512
fbdc1c143d84f2fbbe688a3b26cf3258e127f99a56632f995e8e435c0143b71cfb8b45fd272ba8d40363908fb7b547fad55a289f449fc0bd568fc0c021044691
-
SSDEEP
6144:dTE6vB4f3IfqRah9JsTL6tMCUTFA1V90CI:VEmyQfqRaPmH66jA1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f194d7ae32b3bb8d9cb2e568ea60e962_JaffaCakes118
Files
-
f194d7ae32b3bb8d9cb2e568ea60e962_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
(K.HDa` Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ