Static task
static1
Behavioral task
behavioral1
Sample
25d706432a68e859f5077ddbc32ad080_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
25d706432a68e859f5077ddbc32ad080_JaffaCakes118
-
Size
832KB
-
MD5
25d706432a68e859f5077ddbc32ad080
-
SHA1
590d9c3130d54d383adf6a8cd5a23cf37bfd30f1
-
SHA256
0b99070aab5819f15a3f08f1c7840bd9c255883bc9b225cb4b4695593670d905
-
SHA512
851a7cc56fb9d6dbe25519b69df6ebdfc748e954094f0bae54fdae37e2b43d887b117d9d50ee169ba2280a6f00d8bb597bae609dd57d5eedc8ced7db3f560f1d
-
SSDEEP
12288:NglZopx11vLYE0hZ6Nwd6sOEI/xDId2ylzeDjR34XuTBVs9PhylvcIca:NVj1yF4i6sGpylSni+TBV0P8cIca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25d706432a68e859f5077ddbc32ad080_JaffaCakes118
Files
-
25d706432a68e859f5077ddbc32ad080_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ