Static task
static1
Behavioral task
behavioral1
Sample
8ce7cd957aeaa673f0f07dca1118382d_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
8ce7cd957aeaa673f0f07dca1118382d_JaffaCakes118
-
Size
260KB
-
MD5
8ce7cd957aeaa673f0f07dca1118382d
-
SHA1
bb63988ef5fb54c272e8799186278aa5f4ebcf1d
-
SHA256
471e18398a263a1c7910c28473e27b0f0dc1286f9f37a61a073b3e3251d9b4b7
-
SHA512
f69969b798f8949471fdd19476c1d04e09b51c7e440a3e2cee9157ea736b17df20d330ee2315b4bbac2790a60ae722323d3746636129a2001e6997328f2e8e50
-
SSDEEP
3072:azBdczMXSLFsnDTIKjVAPz4UqKBWfN4DB7eUM3dKnoJvCvlnr92DEbnRiu1WDs:aTXSLGnDMRP1qxlqB7i3dOopCvtYqp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8ce7cd957aeaa673f0f07dca1118382d_JaffaCakes118
Files
-
8ce7cd957aeaa673f0f07dca1118382d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ