Static task
static1
Behavioral task
behavioral1
Sample
f9f6310d89cc57d7429b123c838beb65_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f9f6310d89cc57d7429b123c838beb65_JaffaCakes118
-
Size
696KB
-
MD5
f9f6310d89cc57d7429b123c838beb65
-
SHA1
40671d539c16fa39d7f4843d7379ac7aae968ac4
-
SHA256
e2640f3dd84067bb41f2e7da1c7271b9694b896e98a6020d167326260602cea2
-
SHA512
0927e6251cfc3fab40ceaa2a7974f44d6cb410e9f0d7a02339fc971e6ac8f8317406e34deec9e8046a22be974541469314c3217c8d8bb45884aa53767f4fca56
-
SSDEEP
12288:0RDu8FEhfT0cPBOdt4KOFxQxduHSR3xdaRRPTZn5HPDeuOrOUl+66nBuOPy/3qxT:hZYDO6QHY3ctNcbOA+66nBLPy/6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f9f6310d89cc57d7429b123c838beb65_JaffaCakes118
Files
-
f9f6310d89cc57d7429b123c838beb65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ