Static task
static1
Behavioral task
behavioral1
Sample
5a9a9697bf56bcc169d2d4efe3432643_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
5a9a9697bf56bcc169d2d4efe3432643_JaffaCakes118
-
Size
658KB
-
MD5
5a9a9697bf56bcc169d2d4efe3432643
-
SHA1
0238ada1e93d13acdbc3eb70761d96fe7389979a
-
SHA256
d499c370bd7f71654bf747f61084a20067c5bc58d16cbdb6329a0a4864489998
-
SHA512
e04111e67491c53575fc767edfdc0b92bcfb1f3fb239bceed9e358d2c63c182a178e3d3a0a90809f6c7a6b28f97b78d271292be1e2aff0aff0ea8bb26d3a886b
-
SSDEEP
6144:DSmiqRKHKeiucYvXZP2rgo6hHyA5+pm5F5qfxW+mka9cXNIwt7tpWseWcp/Fmo6w:DPBwKep+rgRNyA55IxJJGcHobZ5TT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a9a9697bf56bcc169d2d4efe3432643_JaffaCakes118
Files
-
5a9a9697bf56bcc169d2d4efe3432643_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ