Static task
static1
Behavioral task
behavioral1
Sample
f621d0e192764812d33810257d5829e7_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
f621d0e192764812d33810257d5829e7_JaffaCakes118
-
Size
1.4MB
-
MD5
f621d0e192764812d33810257d5829e7
-
SHA1
9839af497ea6fa7069c3af309fc5f8cb16656cf7
-
SHA256
2da72eb88d4cd2f01a796756cab1c45ad87416996be860414c2199c59db33710
-
SHA512
9d02edd825fc2c82ac57721758f883145a8fef3599f8ebfbe8ee0cd7678722dc3366a8ad8a81f9af876903a88ffb713ab055713faf1791a831f6fb7f74e4744e
-
SSDEEP
6144:ai5HqF/lHOX1JYUDSa5NiqzMA/rx0U4rreGlNRh1JP2x0NI6MoyHpR1X3Xb2ZMX2:qOF0V2qEoe1X3Xb2ZMXFY7SSiyyjK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f621d0e192764812d33810257d5829e7_JaffaCakes118
Files
-
f621d0e192764812d33810257d5829e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ