Static task
static1
Behavioral task
behavioral1
Sample
3a72526db9c7f7231a25fccbd24a2100_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3a72526db9c7f7231a25fccbd24a2100_JaffaCakes118
-
Size
328KB
-
MD5
3a72526db9c7f7231a25fccbd24a2100
-
SHA1
a735048921b2aa767d21b00f03cdd687e9d9fb52
-
SHA256
31dafb11b649a000d11f6ac7aa383a26fe9243a5784406b872553ba3499e73f7
-
SHA512
94935587fa4ef95cefae1c8739ccc1ae8affe8e4426fe7748582ca69682357893918e62db64345f903ee95ce815e0109566a008d150b4486f8e26aa14fe51653
-
SSDEEP
6144:ckg2NZFhfSjYTsBz7z30PUW2KG59Px4dcfD/kh0Ofvyi:lDC5BHz30PU0GXPxswbzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a72526db9c7f7231a25fccbd24a2100_JaffaCakes118
Files
-
3a72526db9c7f7231a25fccbd24a2100_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ