Static task
static1
Behavioral task
behavioral1
Sample
0103f77f435c280bc67b717764adf127_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0103f77f435c280bc67b717764adf127_JaffaCakes118
-
Size
660KB
-
MD5
0103f77f435c280bc67b717764adf127
-
SHA1
a43bfca025f5dd1a2afacde8e92709c697b4a931
-
SHA256
7d8e97cd9868943f848b23549bfd41db1f314b558e6371880e3ad75bd3d45af0
-
SHA512
7ae90bc313a00fcf1a257095516d03b8a957909cf5a778cba2e5cf2c7aba3439e4eedd02f5c708182c5d110eddd5695cab398411b7135055767f38d8d2df8c52
-
SSDEEP
12288:G6yDK7QQeH9W+x03RmN0Zu5oitRZsn/UDv8x2+WTS3QrSWsQosYJyMLEeGOKAdKK:GhD2J88ghIjitqqR+CS32fs7scEJOPTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0103f77f435c280bc67b717764adf127_JaffaCakes118
Files
-
0103f77f435c280bc67b717764adf127_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ