Static task
static1
Behavioral task
behavioral1
Sample
18675bbfe27a96c3e8e535c98abcade3_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
18675bbfe27a96c3e8e535c98abcade3_JaffaCakes118
-
Size
346KB
-
MD5
18675bbfe27a96c3e8e535c98abcade3
-
SHA1
e8b0bba34a3da2e7b66c6a9eb85ef5bcd85b6dd8
-
SHA256
1b21bf525993b2b88806225746546439bb83c2e14061b96549b97f486fdac241
-
SHA512
12660d7129bbbf4dbf2fb4b93c13a45e7287b4b095e2a3ac81f264cf35bc93ac1e4efc2781bbb53794ef3431639326b5ddee93e7bf379e833ef74cd0b10ca920
-
SSDEEP
6144:4aBzukSHPYKBWaBqVQ4JQO8JBCciwfHGgGovnG:B65HSaB8Q4Jt8JfiC/G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 18675bbfe27a96c3e8e535c98abcade3_JaffaCakes118
Files
-
18675bbfe27a96c3e8e535c98abcade3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
-aK[NKiU Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ