Static task
static1
Behavioral task
behavioral1
Sample
449f1b111f8a860194b6ad772ab8588a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
449f1b111f8a860194b6ad772ab8588a_JaffaCakes118
-
Size
536KB
-
MD5
449f1b111f8a860194b6ad772ab8588a
-
SHA1
269eeb95b178e84dd3295e4f260fd6f9aa68c2cf
-
SHA256
debeb11f0897ca45799fb0aab2729d515f42b126d22cd53a48a59d3e66e45b97
-
SHA512
97aca9dc70c15057dcb48aeebfbf6ee0986a86e52084903745c97ea72e87053fee63391cf85ffd54d93f28214a6f5f7582947af201943af63bf77e3b06a60f87
-
SSDEEP
12288:HhqKkusOaxWEpCqXOehnOPR28zSbh0WubCT2:HhqKkusj4NQhnW9zK0qi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449f1b111f8a860194b6ad772ab8588a_JaffaCakes118
Files
-
449f1b111f8a860194b6ad772ab8588a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ