Behavioral task
behavioral1
Sample
63aa17ae4f307834a491fe583dd40ad2_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
63aa17ae4f307834a491fe583dd40ad2_JaffaCakes118
-
Size
377KB
-
MD5
63aa17ae4f307834a491fe583dd40ad2
-
SHA1
a491ecee060976a3f92d1f78c01eae395458f8e7
-
SHA256
54a665f2962307c1cdb9f865b60da2d5d5940654c7824818c1c6e76168a6cc9b
-
SHA512
d451c2ea0382641e6b554105df5ac2f6866f017ef0097ddffa2e95787cb199bb0f69aeaa892e99acaf3fdb2b7177c65d27b25d38a7d29c292d799b0fa93f8e59
-
SSDEEP
3072:hO7HQolIrINJ8QV6Zx8oIRHkgIOus0yLhRUu8CntXN7FJL2ziDmybJF:hO7PvDVgxxINhIOuqLxr2ziSQ
Malware Config
Signatures
-
Growtopia family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63aa17ae4f307834a491fe583dd40ad2_JaffaCakes118
Files
-
63aa17ae4f307834a491fe583dd40ad2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ