Static task
static1
Behavioral task
behavioral1
Sample
1db6cfdb5ad4a8bad8d7f845ce31fe5c_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
1db6cfdb5ad4a8bad8d7f845ce31fe5c_JaffaCakes118
-
Size
511KB
-
MD5
1db6cfdb5ad4a8bad8d7f845ce31fe5c
-
SHA1
f402c985acc021702a78f526a488a69abdc2c7c7
-
SHA256
8ac7288e8393fe255943388cae8e26a1d265cf87995e207d7d55da45391c7c4d
-
SHA512
a45749ff5513fcba549e6a8a20470318a21818b5ab8baaaed3a69b53d0ac3fb599ec480e9bb95d32c64191f38d623ebf08594ec0f13949586198df47729c0756
-
SSDEEP
12288:PyBwQGzyIhAJnAK8YRInVzOdsN2DwAZLqo08yckYDXxT+USJku1VNZetV3RpRryk:jQGzyRAKN5DQ2yc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1db6cfdb5ad4a8bad8d7f845ce31fe5c_JaffaCakes118
Files
-
1db6cfdb5ad4a8bad8d7f845ce31fe5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
|isGIqXV Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ