Static task
static1
Behavioral task
behavioral1
Sample
ba697895a733585f1e49d5b6004c2ec9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ba697895a733585f1e49d5b6004c2ec9_JaffaCakes118
-
Size
2.0MB
-
MD5
ba697895a733585f1e49d5b6004c2ec9
-
SHA1
7e248767ff4b6cc878a0529b23c908f03a787da1
-
SHA256
36089a6fb87bf77cc8faea20b5b8b77f7c2984d486a2a365214d235f196fb42d
-
SHA512
2af7078b2cf6865bb73faa2373ab4a8a3f6f06f25a031c485fb23a28ff7291575c35e0746ecfd2ec48fae457421a999822c885bc132addd6ebf57a12aaa47924
-
SSDEEP
49152:P8yHJ6R+cXp0YP6flgx2AwsfuxE+q8vSvx7/DOGHyCYMuZak:UyHJ6gcZ0YytKXfuxX0xT1HyDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba697895a733585f1e49d5b6004c2ec9_JaffaCakes118
Files
-
ba697895a733585f1e49d5b6004c2ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ