Static task
static1
Behavioral task
behavioral1
Sample
12eee5b20b3d43f8d415e84ac8be5146_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
12eee5b20b3d43f8d415e84ac8be5146_JaffaCakes118
-
Size
1.1MB
-
MD5
12eee5b20b3d43f8d415e84ac8be5146
-
SHA1
ddca6c026d4564922731d8927f202821b6082fc8
-
SHA256
8d4c4bbf6f75b051c23697d5e312999e9c15ca3c53a8c4aa844cb77fd7bc4b71
-
SHA512
7e02419baad099d7e1fe409898dbfb8d112bf7af7713b67e5d4234f8d816f54d9dc54c5cb774bfc463a0e397ba4ebef3dcb2296deda04bca4624a22ae2af8c96
-
SSDEEP
24576:DE9Xu7phS3T3ocrb4xa9Xy7miHCsm5ng9YRkpVk7:DbmotbaiLmwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 12eee5b20b3d43f8d415e84ac8be5146_JaffaCakes118
Files
-
12eee5b20b3d43f8d415e84ac8be5146_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ