Static task
static1
Behavioral task
behavioral1
Sample
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118
-
Size
1.3MB
-
MD5
2598ebf1b561402e5a4c9042514ac04d
-
SHA1
a888bbd8d3c26c99e3eb49b3121d669c340687ec
-
SHA256
5b8369fd8e0ee96e8a54151a110628c79df21ab82ef65910e92feb40afe1757b
-
SHA512
5cc1ce18ef0242d6519055cf4cf1fa3300682a6a8ed77232135e178eeba457402dcafc747a26898e0d525a0b5ba57890b5472e62236fb4d5ef888020d3b644f0
-
SSDEEP
24576:7gHEvJo0mfNy/JCGaje+vwc3U5DZhMoP8iQQLCb9Slqk:EEa04y/JC3vx3U5v1GQI9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118
Files
-
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 330KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 979KB - Virtual size: 979KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ