Static task
static1
Behavioral task
behavioral1
Sample
f085c3358b59f0f7233e460816b9cffd_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f085c3358b59f0f7233e460816b9cffd_JaffaCakes118
-
Size
1.2MB
-
MD5
f085c3358b59f0f7233e460816b9cffd
-
SHA1
1fa9928211033fd8afadc910e5acbd608d2686d1
-
SHA256
ac4d23b56b2aac65756dafc7d6ff505ba986f40410370ca4c094f0530e399d79
-
SHA512
88525849adc8ea59bf90a3e95d284b66514e24a955f059d1be29eab26e9d052d6dcd353668a3330055478b5c982ce508a8aa2aabe42dfc99979c9a4a70637d43
-
SSDEEP
24576:WcOsBgo0q4wMfBmCmTOUd+L6kkXWx92kglmR4SmXP:WloHMpmCm6Ud+zkXn64SmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f085c3358b59f0f7233e460816b9cffd_JaffaCakes118
Files
-
f085c3358b59f0f7233e460816b9cffd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ