Static task
static1
Behavioral task
behavioral1
Sample
5bfcf97e3d423493467e41756230a2de_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5bfcf97e3d423493467e41756230a2de_JaffaCakes118
-
Size
380KB
-
MD5
5bfcf97e3d423493467e41756230a2de
-
SHA1
563896b10e506146a8e9b37eb04291c550c32544
-
SHA256
afe9941c781ccc9abb7e6b1a437dcbc6b79bbda2ba4b07e980a86b817c48c5d1
-
SHA512
909a080cb9c65df07f2590ace338129d566d3d73bba94491aaae95e96a29e478fcbf5f681b3ce030b3f8a9a26f68822debdcc4bb83131c27559da6739292314e
-
SSDEEP
6144:IWzYaLkZlKmYaTCDa5wnr1AwpT/Oa96FbD/popHx149Olwq2Oi9XpVYU:IWM1tdT3gnp5gbpoT1495f79zYU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bfcf97e3d423493467e41756230a2de_JaffaCakes118
Files
-
5bfcf97e3d423493467e41756230a2de_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ