Static task
static1
Behavioral task
behavioral1
Sample
9b85dba21787f176733a9bf5f7f0ba75_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
9b85dba21787f176733a9bf5f7f0ba75_JaffaCakes118
-
Size
632KB
-
MD5
9b85dba21787f176733a9bf5f7f0ba75
-
SHA1
5f43da5607aec4c356f535699a4281aa6804858c
-
SHA256
96b00cba77c307a51ecc207c3bafb7af3da5c8f51154b5056ff98a6844ac4f96
-
SHA512
2709706fde37da5b76241119b6e8ead87224d68840fe60b5f2daf0419b1e69b1909783a5e1bbc715bc99a7daa4a7554ce73fdb79cd7b1b931ed0ffde22ab7a24
-
SSDEEP
12288:L47eV+T29RXQN4xrBOQdAWhKbimInshAVs12eLyykYq5Z1B+L3wQzqNK6:yekT2PQQSWYimBaVsFW8qJ3sOK6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9b85dba21787f176733a9bf5f7f0ba75_JaffaCakes118
Files
-
9b85dba21787f176733a9bf5f7f0ba75_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 630KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ