Static task
static1
Behavioral task
behavioral1
Sample
7246ec2be038522b09f6d16f81c85ee0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
7246ec2be038522b09f6d16f81c85ee0_JaffaCakes118
-
Size
303KB
-
MD5
7246ec2be038522b09f6d16f81c85ee0
-
SHA1
aa103b718e330ff281ec022c0da95b757fcfcf6e
-
SHA256
951b43e630c972001fbfffffe720057b56d0e99a982568e390d177a9a4313a95
-
SHA512
20fb2007a659df6585e68c32aa7c83dcb7a6e792c9e5ed0a45af198be0e4fa39244637472bd844e1082a3563dbbe82d532ce3a89483736409c341262d02ef7ad
-
SSDEEP
6144:cdFNT/GHvnxFQLUGVzdJ1wNaHKuDQjgn:cdFGvxYUGxdJ1kOugn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7246ec2be038522b09f6d16f81c85ee0_JaffaCakes118
Files
-
7246ec2be038522b09f6d16f81c85ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ