Static task
static1
Behavioral task
behavioral1
Sample
0329392630eee094482ce54d45eb6e4d_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
0329392630eee094482ce54d45eb6e4d_JaffaCakes118
-
Size
782KB
-
MD5
0329392630eee094482ce54d45eb6e4d
-
SHA1
d101266680b49f98fa9bfd1f1a7428f8ec1ec1df
-
SHA256
d59d14279f8a1b9887a83a2ea99c6e161c94774f3603e46eeb52b11417c753ab
-
SHA512
9ea5bea90dff0f446181da044b0fb689f08702e3f25af6a70ee65f767659b4b7edb87a1e329e91559b572190b19d4e3a03ed7e1decc19a050aa2198053a68e99
-
SSDEEP
12288:zacwfySyzqwAZj4ziHgkZ0tCNDnTnts6uPmy0n5u8cuWz:+t6ZqPmi2tCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0329392630eee094482ce54d45eb6e4d_JaffaCakes118
Files
-
0329392630eee094482ce54d45eb6e4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 418KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ