Static task
static1
Behavioral task
behavioral1
Sample
f845608fb595636275a71887f151cc46_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f845608fb595636275a71887f151cc46_JaffaCakes118
-
Size
880KB
-
MD5
f845608fb595636275a71887f151cc46
-
SHA1
3bb40de334e21ad3d8b5ffeb5a3528e3a37bd39d
-
SHA256
26e7e4382e5c5d9d5fb8a7a621bf4dbe521b9eb1938527e8bb1419f60b55c5db
-
SHA512
e3935e4784c496c8efa3aec9a2cea1f6551819e8f6da96617456e728d1bb1e31584548037e0120b7b48c27afe31b99b3362f7943d2fe5fde8ed50526fda837de
-
SSDEEP
12288:khGka6ggR5m3hdrmBfd4m9adXLzposha3T32zL9TgF7eQ7hLb1asch+jkE5axQ9E:khGhptXkKSlFW52RPKCY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f845608fb595636275a71887f151cc46_JaffaCakes118
Files
-
f845608fb595636275a71887f151cc46_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 756KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ