Static task
static1
Behavioral task
behavioral1
Sample
3e5b3579e97745512e8766b9c89aba66_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
3e5b3579e97745512e8766b9c89aba66_JaffaCakes118
-
Size
503KB
-
MD5
3e5b3579e97745512e8766b9c89aba66
-
SHA1
43a67810e5278a542f6a4d8eb86040b64e34fb35
-
SHA256
90e165246c0518ce77a98adbe2cd589bdc75d162f23fde3e7f837882b8facd2f
-
SHA512
d967309ba2e26e71c692850c04aae9a90880614848c021e332d06d4de123c02cf07768b42503d065cde9187e3d56b1637d16b775f2c755a7b1ae01632000dc6c
-
SSDEEP
12288:mY9OgcjseeEyx6a7AX8EmUfsgHYYKDWHe3odvByqTX:mgcjsfH6aamUfUfWDvcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3e5b3579e97745512e8766b9c89aba66_JaffaCakes118
Files
-
3e5b3579e97745512e8766b9c89aba66_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ