Static task
static1
Behavioral task
behavioral1
Sample
f630dcf695a501b08d5cc692eca7f68f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f630dcf695a501b08d5cc692eca7f68f_JaffaCakes118
-
Size
2.7MB
-
MD5
f630dcf695a501b08d5cc692eca7f68f
-
SHA1
8552089e8e27122924c7749c367cb5e048a12866
-
SHA256
bbe77f4ad42ab6a4a816f94aca12f70fc0a20332f37e96301a55b65e56f94aaf
-
SHA512
4cd53329c5f1f0d253b6c9be52fb72e2961da16f0fcc9c6f6c07190a3cda1cfae224f9b5ea205e2a4423be59032a324db6316ae8305405ab875f26b234a4bbf3
-
SSDEEP
49152:+Xgx6J4zRXUF2+PTPLekuFcPFTplBoHLUCG4skETBIynLPK8+jQJ+QBM4kpE:+uLUFTP+k6cEHQCaPTqS+joGa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f630dcf695a501b08d5cc692eca7f68f_JaffaCakes118
Files
-
f630dcf695a501b08d5cc692eca7f68f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ