Static task
static1
Behavioral task
behavioral1
Sample
96f6deb36c8406eccfccc7bd38267c0e_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
96f6deb36c8406eccfccc7bd38267c0e_JaffaCakes118
-
Size
435KB
-
MD5
96f6deb36c8406eccfccc7bd38267c0e
-
SHA1
fb149c90507adb9461e54df9824407e5449460ec
-
SHA256
52a3e59905cc8e33bc33223e1b55482b484c6e04d7795a7329946a77502e950d
-
SHA512
45beb204401b27cdf25db83623183aef4188f2c7b11853bee2ecfa2605323473613425843f8847ad769b0f19b9904daa372a749597a14768131fded0bc1bfb70
-
SSDEEP
12288:Rhv2zv1gyJawBZX6nY0/K6Bgx+MZXkx7NR2iN:Ro2yX36/K6OxPZXq7b1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f6deb36c8406eccfccc7bd38267c0e_JaffaCakes118
Files
-
96f6deb36c8406eccfccc7bd38267c0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ