Static task
static1
Behavioral task
behavioral1
Sample
2177e23fdb0edf07b9390bbc12979379_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
2177e23fdb0edf07b9390bbc12979379_JaffaCakes118
-
Size
328KB
-
MD5
2177e23fdb0edf07b9390bbc12979379
-
SHA1
7e7d208af5ecd7e1f66f6cc7e410703af666bdf4
-
SHA256
b104c6fe931b690475af8136070db62905cc25d9e7713ca5d6d38651e7e179b7
-
SHA512
e98fe87f954827b7ebc427f4380927cd4664724a661e97f614601c44d6a999442896218664fee3d8ef5c6119ffc82828699cb13468db8722d7ee2e47e6157dfa
-
SSDEEP
6144:psE3WpQMV/0dfoXvXAa5EQJJf2dKhbrct9lx7lm5b7TiOxU3RUCjj:psFQMGqfwkDaKtovMltq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2177e23fdb0edf07b9390bbc12979379_JaffaCakes118
Files
-
2177e23fdb0edf07b9390bbc12979379_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 325KB - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ