Static task
static1
Behavioral task
behavioral1
Sample
70eef5e2aeb9f20bd43597aa829a95e2_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
70eef5e2aeb9f20bd43597aa829a95e2_JaffaCakes118
-
Size
357KB
-
MD5
70eef5e2aeb9f20bd43597aa829a95e2
-
SHA1
179331204a07257d0a8a5b43284fc2873ce9e620
-
SHA256
bca3d5eb15bb32ab76803b529838de3cf0217f3f247473e77dcb112d4b5a2517
-
SHA512
e5cd3b9405e8e2e79c2870082e60318364432c6cba3a1151fb74eed289c84d5133ae730bab715a810ed32b42c25386c9b422bfa6e9fad3c007749cad6dd15125
-
SSDEEP
6144:u/7ZlzuEeOtPY9jsrWzhLSwdMVsTrj5qwN4S3Fzs4+Xr0DP6:u/FbNY9jL9Swd+s39qzSRtKwDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 70eef5e2aeb9f20bd43597aa829a95e2_JaffaCakes118
Files
-
70eef5e2aeb9f20bd43597aa829a95e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ