Static task
static1
Behavioral task
behavioral1
Sample
099603debbd8297f3cf80a1b54baa6d2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
099603debbd8297f3cf80a1b54baa6d2_JaffaCakes118
-
Size
104KB
-
MD5
099603debbd8297f3cf80a1b54baa6d2
-
SHA1
30b262113032920a9c7d0c60a3f589f7dcce0b50
-
SHA256
29a0c806cc31dcb438aecd85b3083851c98fea557cae8fb01f6bb1c66fefdc30
-
SHA512
8cd059b1fbac1c3b59a92b18c88628d2dceaf9ee1ce735484fd8e72d6e4892e3fc97e255b3a4e9abe933685d2dcbc10299ca1be84cc6e6b034fdcc7e33048777
-
SSDEEP
1536:Q6FD+jE4Z1mCxni6zlhXlaKOXg6mEV6zu/T4JG5eEAHAxLi:Lx+jTIii6zv1aKO7mvu/+GQLAxLi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 099603debbd8297f3cf80a1b54baa6d2_JaffaCakes118
Files
-
099603debbd8297f3cf80a1b54baa6d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ