Static task
static1
Behavioral task
behavioral1
Sample
0a2fd69926acfa1ba2386418c1c17329_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0a2fd69926acfa1ba2386418c1c17329_JaffaCakes118
-
Size
439KB
-
MD5
0a2fd69926acfa1ba2386418c1c17329
-
SHA1
5355ac110d047c1a52abd2eec537ac4e44195626
-
SHA256
9dbb63b6910aa93bdc75f3c9916d5a23c77f63260140c4d07b7a7bfd1497e8f9
-
SHA512
5285ebd324ef676b5f61e8fd781008328bf275d16a7e012170f6966edeec3191a33ae09070f0b6ba793b9f8a73de51880a7394eff167cb7a930d603d293af609
-
SSDEEP
12288:2inGLjeFI06zUshKDwV9arhTgxCPCb1JYXZ66Ju5F:MeFIZs078gxWCRJYoIgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a2fd69926acfa1ba2386418c1c17329_JaffaCakes118
Files
-
0a2fd69926acfa1ba2386418c1c17329_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ