Static task
static1
Behavioral task
behavioral1
Sample
98cb11ba7b720a7c22fe43880b929644_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
98cb11ba7b720a7c22fe43880b929644_JaffaCakes118
-
Size
507KB
-
MD5
98cb11ba7b720a7c22fe43880b929644
-
SHA1
e10f2eacde460d81cec742529bf568666b173d60
-
SHA256
10315b72552f99fdd1f62e823bbe3085e6696886148e0316f49fbdfa268315ca
-
SHA512
8fb6f739e9d565290fac0e66ca6f97a06c9d6c294b41555c55b6312f074a1d1843164f288b6748a274a369a8e8472f5ec39b6da0656cda75081f86c9baa81b05
-
SSDEEP
12288:kBZl1vvNQSnTlBZl1vvNQSnTYbq1R9o7J6Uon/OM:A1vvNQQTz1vvNQQTYbU9yJ6TGM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98cb11ba7b720a7c22fe43880b929644_JaffaCakes118
Files
-
98cb11ba7b720a7c22fe43880b929644_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 504KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ