Static task
static1
Behavioral task
behavioral1
Sample
84697862a4268a62a447929adaa21192_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
84697862a4268a62a447929adaa21192_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84697862a4268a62a447929adaa21192_JaffaCakes118
-
Size
1.1MB
-
MD5
84697862a4268a62a447929adaa21192
-
SHA1
202f8bf498c815917736d2188d67180e486d0a80
-
SHA256
0c121b8b0d5cb95df98ef017aee09a33d858d96b3d849c30c8735384c89a22c4
-
SHA512
37fe204da7e0aaf5f8a6d99e831f10c27c0183917cee8f44fe32a7beb4e0383885fc20e7c7677b435d60fe6ca4a5c7ae87125f5a31629724bc8fb46420b6d09c
-
SSDEEP
24576:vsMtbXo0Q6NnauHNlGaEG8sLVaHzhFKKWe86CCaaQhI4s+:1o0Q6NnhHNloG8WAHzhlpCpI4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 84697862a4268a62a447929adaa21192_JaffaCakes118
Files
-
84697862a4268a62a447929adaa21192_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ