Static task
static1
Behavioral task
behavioral1
Sample
0a48ebd4c893f0e4e54edc1024236b06_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0a48ebd4c893f0e4e54edc1024236b06_JaffaCakes118
-
Size
676KB
-
MD5
0a48ebd4c893f0e4e54edc1024236b06
-
SHA1
e6a51d4134a8807abca494a17619c42647e9669c
-
SHA256
695da3c8bed2ce16d81174c620837b40e19a2e0f0b77c3385129046e45c49888
-
SHA512
3c5023a74ebdbeb024f9303c923721c8c825e9922bbb406b2ecdd58ceb5aba97ac60d3c7c4b73de9eeb689912d34c103f926302bac9cec13a409ef3e957acb5a
-
SSDEEP
6144:QtMkmy4LRp+I3tEUDiUPU8Z3S8fZRwq3RhK3eJoyPgPVZyEgf:2MkmhpZ6UDvU8Z3SEZWiRhK3kgdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0a48ebd4c893f0e4e54edc1024236b06_JaffaCakes118
Files
-
0a48ebd4c893f0e4e54edc1024236b06_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ